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.INFRASTRUCTURE  LOG 

_DAY  18:  Came  to  work  and  found  everything  frozen.  Icicles 
are  everywhere.  It’s  our  processes.  They’re  inflexible. 

Hard  coded  so  we  can’t  respond  to  change. 

_Why  did  we  lock  ourselves  in  like  this?  Brrrr. 

_DAY  19:  A  way  out.  IBM  WebSphere  middleware  for  Business 
Process  Management.  It  lets  us  streamline  business  tasks 
and  optimize  performance.  We  can  simulate  and  test  our 
processes  so  we  understand  the  impact  they’ll  have,  then 
monitor  performance  once  they’re  deployed.  And  because 
it’s  based  on  a  service  oriented  architecture,  it’s  easy 
to  reuse  and  connect  existing  process-based  services. 

.Everything’s  unfrozen  now.  Wow,  it’s  good  to  feel  my 
toes  again. 


Take  the  BPM  with  SOA  Assessment  at: 

IBM.COM/TAKEBACKCONTROL/PROCESS 


WebSphere 


UP  TO  80%  MORE 
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PER  WATT. 


(100%  MORE  HIGH-FIVES  IN  THE  SERVER  ROOM.) 


INTRODUCING  THE  DUAL-CORE  INTEL®  XEON®  PROCESSOR  FOR  SERVERS. 

Up  to  80%  more  performance  per  watt  than  the  competition*  20  leading  performance  benchmarks. 
Up  to  60%  faster  with  significantly  lower  energy  consumption  than  the  competition.  All  that 
and  the  best  two-way  platform  for  virtualization.  Intel®  Core'"  Microarchitecture.  It's  the  future. 
Learn  more  at  intel.com/xeon 
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ITVideo:  Better  backup  through 
virtual  tapes 

Editorial  Director  John  Gallant  puts 
Diligent  CEO  Doron  Kempel  on  the 
Network  World  Hot  Seat  to  discuss 
the  benefits  of  virtual-tape  backup. 

DocFinder:  4439 

Stay  up-to-date  on  the  drive 
to  work 

In  our  Network  World  360  podcast, 
NetworkWorld.com  News  Editor  Jeff 
Caruso  will  keep  you  up-to-date  on 
the  week's  top  news. 

DocFinder:  4438 


One  hopping  network 

We  look  at  how  Australian 
researchers  are  tracking  the  move¬ 
ment  of  cane  toads  through  a 
wireless  network  —  that  includes 
tiny  backpacks  worn  by  the 
amphibians. 

DocFinder:  4442 

Stupid  user  interfaces 

Columnist  Mark  Gibbs  just  wanted 
to  change  his  address  for  an  e-mail 
newsletter,  but  the  interface  was  so 
bad,  he  canceled  the  whole  thing. 

DocFinder:  4441 


Online  help  and  advice 


Protecting  against  wireless 
driver  vulnerabilities 

Mike  Kershaw  of  the  Wireless 
Vulnerabilities  and  Exploits  projects 
explains  how  to  minimize  your  risks. 

DocFinder:  4440 

WAFS  for  the  branch  office 

Analyst  Robin  Gareiss  explains  why 
you  might  want  to  look  at  an 
emerging  class  of  products  that 
merge  wide-area  file  services, 
routing,  switching  and  security  in  a 
single  box.  DocFinder:  4449 

How  to  downsize  your  career 

One  user  seeks  advice  about 


Seminars  and  events 

The  ultimate  IT  event  in  Dallas 

Successful  IT  executives  not  only  need  to  know  about  compelling  new  tech¬ 
nologies  and  industry  best  practices,  but  how  all  these  pieces  fit  together 
to  create  an  architecture  that  helps  drive  business.  And  only  one  event  — 
Network  World's  IT  Roadmap  —  lets  you  do  it  all  in  seven  key  areas. 
Qualify  to  attend  free  when  IT  Roadmap  comes  to  Dallas  on  Sept.  13. 
DocFinder:  4446 


BREAKING  NEWS 

Go  online  for  breaking  news  every  day.  DocFinder  1001 

Free  e-mail  newsletters 

Sign  up  for  any  of  more  than  40  newsletters  on  key  network  topics. 

DocFinder  1002 

What  is  DocFinder? 

We’ve  made  it  easy  to  access  articles  and  resources 
online.  Simply  enter  the  four-digit  DocFinder  number  In 
the  search  box  on  the  home  page,  and  you’ll  jump  directly 
to  the  requested  information. 


cutting  back  his  job  —  he  doesn't 
mind  making  less,  but  only  if  that 
also  means  fewer  responsibilities 
and  stress.  Suggestions? 

DocFinder:  4443 

Time  to  move  to  desktop  Linux? 

Lab  Alliance  member  James  Gaskin 
explains  why  he's  not  real  happy 
with  Microsoft  right  now  —  and 
what  people  in  a  similar  situation 

can  do  DocFinder:  4444 

Stupid  IT  tricks 

Storage  newsletter  writer  Mike  Karp 
offers  examples  of  things  you  should 
never  ever  do.  DocFinder:  4445 


SECURING  PRODUCTIVITY 


Crimeware  takes  many  forms — keyloggers,  spyware,  Trojan  horses— but  has  only  one 
purpose,  to  compromise  your  defenses.  Websense  searches  more  than  75  million  websites 
ivery  day  to  find  these  threats  before  they  can  strike.  Because  they  will  stop  at  nothing. 

Gfet  proactive, 
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AT&T  targets  VoIP,  wireless  services 

New  offerings,  including  security  and  Web  hosting,  on  tap. 


BY  DENISE  PAPPALARDO 

AT&T’s  development  road  map 
for  the  next  year  includes  new 
and  enhanced  offerings  around 
VoIP  wireless,  security  and  Web 
hosting,  company  officials  said 
last  week. 

The  carrier  is  readying  a  new 
service  called  Remote  Worker  that 
will  extend  the  reach  of  AT&T’s  IP 
Centrex  service  to  users  working 
from  home  or  on  the  road,  says 
Peggy  Sexton,  business  VoIP  prod¬ 
uct  management  vice  president. 
The  service  provides  corporate 


customers  with  a  secure  means  of 
using  VoIP  regardless  of  where 
they  are,  she  says,  because  the  IP 
voice  traffic  is  transmitted  over 
any  broadband  connection  via 
an  IPsec-encrypted  tunnel. 

Users  can  download  a  soft 
client  from  Eyebeam  to  their  PC 
so  they  can  make  and  receive 
VoIP  calls,  or  they  can  use  a 
Session  Initiation  Protocol  (SIP) 
phone  from  Cisco  or  Polycom. 
“We  will  be  certifying  other  SIP 
phones,”  Sexton  says. 

AT&T  contends  there  is  great 


customer  demand  for  VoIP  ser¬ 
vices  that  keep  workers  on  the 
same  network  using  the  same  call 
features  regardless  of  where  they 
work.  Sexton  says  an  aerospace 
company  that  she  declined  to 
identify  wants  to  order  1,000 
subscriptions  for  the  service. 
AT&T  is  testing  Remote  Worker 
with  customers.  Availability  of 
the  offering  will  depend  on  the 
success  of  the  trials. 

AT&T’s  VoIP  group  is  also  mak¬ 
ing  network  architecture  changes. 
Last  year  AT&T  upgraded  its  VoIP 


Seven  ways  to  boost 
application  performance 


Network  managers  and 
industry  experts  share 
some  tips,  tricks  and 
technologies  that  help 
amp  up  apps. 

BY  DENISE  DUBIE 

When  it  comes  to  boosting  app¬ 
lication  performance,  it’s  about  a 
lot  more  than  just  the  bandwidth. 

“Our  network  is  scattered  across 
the  country  with  82  field  offices 
and  10  regional  locations.  Our 
field  offices  don’t  have  local 
servers,  and  they  had  pretty  slow 
lines,” says  Chris  Finucane.CTO  for 
the  U.S.  Department  of  Health  and 
Human  Services,  Office  of  In¬ 
spector  General  in  Washington, 
D.C.“We  optimized  the  network 
and  upgraded  all  our  links  to  T-l 
lines,  and  the  field  offices  didn’t 
notice  a  huge  difference.  That’s 
when  we  realized  bandwidth  can’t 
be  everything  and  we  needed  to 
investigate  other  means  to  im¬ 
prove  application  performance.” 

Finucane’s  challenge  is  not 
unique,  according  to  industry 
watchers  who  say  today’s  increas¬ 
ingly  complex  applications  simply 
aren’t  designed  to  run  smoothly 


across  large  distributed  networks 
that  support  branch,  remote  and 
mobile  workers. That  has  network 
executives  scrambling  to  invest  in 
new  technologies  —  such  as 
application  acceleration  and 
WAN  optimization  tools  —  and 
others  working  with  system  ad¬ 
ministrators  and  application 
developers  to  tweak  internal 
servers  and  fine-tune  application 
code.  We  spoke  with  a  handful  of 
network  professionals  and  indus¬ 
try  analysts  to  get  their  advice  on 
how  to  boost  application  perfor¬ 
mance  across  a  network. 


1  Emulate  WAN 
■  conditions. 


Sometimes  the  best  defense  is  a 
good  offense.  That’s  the  premise 
behind  products  that  simulate  net¬ 
work  —  specifically  WAN  —  con¬ 
ditions  to  help  network  managers 
(and  application  developers)  get 
a  handle  on  how  an  application 
will  behave  on  a  given  network 
under  certain  conditions. 

Robert  Wieters,  enterprise  net¬ 
work  architect  at  cosmetics  com¬ 
pany  Mary  Kay  in  Dallas,  says  his 
staff  uses  Shunra’s  Virtual  Enter- 


Application 
pain  points 

250  network  managers 
were  asked  how  slow 
applications  affect 


employee  productivity. 

%  of  reduction 
Application  in  productivity 


E-mail 

17% 

Oracle 

14% 

SAP 

14% 

Web 

14% 

Custom  .Net 

12% 

Custom  J2EE 

12% 

PeopleSoft 

11% 

Siebel 

11% 

Other 

16% 

SOURCE:  YANKEE  GROUP 

prise  network  simulation  tool  to 
“create  a  mock-up  of  the  network, 
configure  typical  behaviors  and 
stress  the  application  in  that  envi¬ 
ronment  to  discover  where  chal- 
See  Applications,  page  18 


platform  to  one  that  supports 
SIR  This  year  it  is  replacing  its 
Siemens  Call  Control  Element 
server  with  an  IP  Multimedia  Sub¬ 
system  (IMS)  Session  Controller 
from  Lucent. 

IMS  is  an  open  standard  that 
defines  how  wireless  or  wireline 
IP  networks  should  transport 
voice  and  data  sessions.  It  allows  a 
carrier  to  centralize  application 
servers  that  can  be  accessed  by 
all  customers. 

IMS  will  let  AT&T  exchange  call 
control  information  with  Cingular 
Wireless,  Sexton  says.  This  will  let 
Cingular  customers  “dip  into  any 
[AT&T]  applications;  conversely  if 
Cingular  has  an  application  on 
their  network  that  an  AT&T  cus¬ 
tomer  wants  to  access  we  can 
pass  call  control  to  them.” 

Cingular  also  announced  plans 
to  move  to  Lucent’s  IMS  platform 
in  October  (www.nwdocfinder. 
com/4450). 

Customers  on  Cingular’s  wire¬ 
less  network  or  AT&T’s  VoIP  net¬ 
work  will  be  able  to  access  and 
use  AT&T’s  IP  Conferencing  and 
Voice  DNA  services.  The  carrier 
says  that  next  year  it  plans  to  add 
more  applications  to  the  platform, 
including  presence, collaboration, 
document  sharing  and  unified 
messaging. 

Unified  messaging  is  one  of 
only  a  few  enterprise  services  that 
the  new  AT&T  has  adopted  from 
legacy  SBC,  Sexton  says.  AT&T  has 
a  unified  messaging  service,  but 
Sexton  says  SBC’s  offering  is  more 
robust.  The  carrier  is  in  the  pro¬ 
cess  of  integrating  SBC’s  unified 
messaging  application  with  its 
network,  and  it  is  expected  to  be 
available  to  all  customers  by  the 
second  quarter  of  2007. 

“It  seems  that  AT&T  is  taking  a 
conservative  approach  integrating 
SBC  applications  and  services 
with  AT&T,”  says  Brian  Washburn, 
an  analyst  at  Current  Analysis. 
“They’re  taking  the  old  adage 
measure  twice,  cut  once,  to  heart.” 

“This  is  the  old  AT&T  we  know 
and  love,  taking  its  time  testing 


and  bringing  products  and  ser¬ 
vices  to  market,”  he  says.  Not  nec¬ 
essarily  a  negative  for  customers, 
but  it  does  make  Washburn  ques¬ 
tion  how  much  network,  plat¬ 
form  and  service  integration  has 
happened  between  legacy  SBC 
and  AT&T. 

Integration  must  be  all  consum¬ 
ing  at  the  carrier  these  days,  but  it 
is  also  plowing  ahead  with  more 
service  development  this  year 
than  in  2005,  when  AT&T  was 
focused  on  its  merger. 

Mobile  security 

AT&T  is  also  trying  to  extend  its 
security  services  to  its  mobile  cus¬ 
tomers  by  rolling  out  a  new  ver¬ 
sion  of  its  Personal  Firewall  ser¬ 
vice  for  PDA  users, says  Stan  Quin¬ 
tana,  vice  president  of  AT&T  secu¬ 
rity  services.  The  carrier  is  testing 
Personal  Firewall  software  for 
Blackberry  devices. 

AT&T  first  announced  its  Per¬ 
sonal  Firewall  service  more  than 
two  years  ago  (www.nwdocfinder. 
com/4451). That  offering  allows  a 
network  manager  to  maintain 
security  policies  on  LAN,  WAN 
and  user  devices.  AT&T  is  now 
making  the  same  security  features 
available  to  PDA  users. 

Quintana  says  AT&T  is  also 
developing  a  new  identity  man¬ 
agement  capability  using  a  similar 
two-factor  authentication  technol¬ 
ogy  used  by  Visa  and  MasterCard. 

AT&T  has  been  offering  token- 
based  authentication  through  a 
partnership  with  RSA  Security. 
Now  the  carrier  is  working  on  a 
new  generation  of  public-key  inf¬ 
rastructure  (PKI)  that  would  allow 
AT&T  to  offer  users  stronger  secu¬ 
rity  that’s  easier  to  manage,  Quin¬ 
tana  says. 

“The  advantage  of  using  PK!  is 
you  don’t  have  something. a  tag.  to 
misplace,”  which  is  part  of  token- 
based  systems,  he  says.’But  imple¬ 
menting  a  PKI  system  can  be  very 
burdensome  from  a  key  manage¬ 
ment  perspective.” 

AT&T  is  working  with  a“different 
See  AT&T,  page  16 
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PowerPoint  gets  a  virus 

g!  Microsoft  last  week  warned  about  a  virus  that  could  exploit  a  vulnerability  in  its 
PowerPoint  presentation  software. The  virus  is  carried  out  when  a  user  launches  a 
PowerPoint  attachment  to  an  e-mail  or  opens  a  file  provided  by  an  attacker.  Hackers 
could  lure  users  to  a  Web  page  that  offers  content  or  advertisements  containing  a 
file  that  exploits  the  PowerPoint  software,  Microsoft  said.The  vulnerability 
applies  to  PowerPoint  2000,2002  and  2003.  Once  the  user  triggers  the 
corrupt  PowerPoint  file,  the  virus  installs  a  keystroke  logging  system  to 
capture  everything  typed  on  the  machine.  It  also  leaves  the  machine 
open  to  having  a  hacker  install  other  malicious  programs.  Microsoft  said 
it  was  completing  development  of  a  security  update  to  fix  the  vulnera¬ 
bility  and  was  on  schedule  to  release  the  patch  by  Aug.  8. 


AT&T  wiretap  suit  can  go  forward 

■  A  federal  judge  last  week  denied  motions  by  the  U.S. 
government  and  AT&T  to  stop  a  lawsuit  over  alleged  par¬ 
ticipation  by  the  carrier  in  an  illegal  wiretapping  pro¬ 
gram  by  the  National  Security  Agency  Judge  Vaughn 
Walker  of  the  U.S.  District  Court  for  the  Northern  District 
of  California  denied  the  government’s  motion  for  dis¬ 
missal  of  the  case  or  summary  judgment  on  the  basis 
that  the  case  involved  state  secrets.  He  also  denied 
AT&T’s  motion  to  have  the  case  dismissed.  The  civil  lib¬ 
erties  group  Electronic  Frontier  Foundation  sued  AT&T  in 
January  on  behalf  of  the  carrier’s  customers,  alleging  it 
diverts  traffic  from  its  fiber-optic  lines  to  the  NSA  as  part 
of  an  illegal  antiterrorist  surveillance  program.  The  suit, 
one  of  several  in  the  works,  followed  press  reports  last 
year  about  major  carriers  providing  data  for  broad 
domestic  spying  initiatives.The  case  still  could  be  halted. 
In  his  decision,  Judge  Walker  allowed  the  parties  to  make 
an  instant  appeal  to  a  higher  court,  a  move  that  could 
lead  to  all  or  part  of  the  case  being  stayed. 

Wireless  project  really  up  in  the  air 

M  A  consortium  consisting  of  researchers  from  Japan 
and  Europe  is  using  balloons,  airships  and  unmanned 
solar-powered  planes  to  relay  wireless  and  optical  com¬ 
munications  in  a  project  called  Capanina.The  three-year 
project,  led  by  the  University  of  York  in  England,  is 
designed  to  bring  low-cost  broadband  connections  to 
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“People  are  at  more  of  a 
comfort  level. . .  .They  are  not 
as  worried  about  downsizing  or 
outsourcing  as  they  were  three 
or  four  years  ago.” 

Marshall  Curtis,  IT  director  for  the  Carlisle  Walker  Group, 
commenting  on  increased  work/life  balance  satisfaction  found 
in  Network  World's  2006  Salary  Survey. 

See  story  page  39 

remote  areas  and  possibly  to  high-speed  trains.  Disaster 
management  is  another  possible  application.  The 
researchers  boast  that  the  technology  could  provide 
data  rates  100  times  faster  than  asymmetric  DSL. 

Database  hacking  all  the  rage 

■  Hackers  are  striking  databases  in  record  numbers,  try¬ 
ing  to  pilfer  a  rich  trove  of  personal  and  financial  data. 
Managed  security  provider  SecureWorks  says  it  is  detect¬ 
ing  as  many  as  8,000  attacks  per  day  on  databases  owned 
by  its  clients,  up  from  an  average  of  100  to  200  attacks  per 


TheGoodTheBadTheUgly 

Microsoft  hires  Sony  rootkit  sleuth. 

Microsoft  can  always  use  more  smart  people  when  it  comes  to  secur¬ 
ity,  right?  The  company  last  week  announced  it  has  acquired  Winternals 
Software,  the  company  co-founded  by  rootkit  detective  Mark  Russino- 
vich.  He  made  international  headlines  last  November  after  he  discovered 
that  copy-protection  software  Sony  had  been  distributing  with  millions 
of  CDs  was  cloaking  itself  using  undetectable  rootkit  software. 

<  Pirates  everywhere.  The  new 

"Pirates  of  the  Caribbean"  movie  grossed  more 
than  $250  million  at  the  box  office  during  its  first 
two  weekends,  but  not  everyone  likes  pirates. 
Microsoft  last  week  said  it  filed  26  lawsuits  against 
alleged  dealers  of  pirated  software  in  seven  U.S. 
states,  claiming  the  companies  sold  pirated  soft¬ 
ware  or  computers  loaded  with  pirated  software, 

Software  is  like  a  box  of 

melted  ChOCOlate.  Salesforce.com 
last  week  sent  by  express  delivery  its  press  kit  about  a  new  version  of 
its  CRM  product.  Inside  was  a  melted  blob  of  chocolate,  enclosed  in 
clear  wrapping  and  tied  with  a  red  ribbon.  Our  question:  Was  this  some 
sort  of  message  about  the  meltdown  of  traditional  packaged  software, 
or  did  the  company  just  not  foresee  the  heat  wave  that  hit  the  East 
Coast  last  week? 


NOAH  Z.  JONES 


day  in  the  first  three  months  of  this  year.  The  statistics 
come  from  data  on  its  1 ,300  clients,  including  financial 
institutions  and  utilities,  most  of  which  are  in  the  United 
States.  SecureWorks  has  detected  hackers  working  from 
computers  in  Russia,  China,  Brazil,  Hungary  and  Korea. 
They  are  using  a  method  known  as  a  SQL  injection 
attack,  the  company  says.Visa  and  MasterCard  are  rewrit¬ 
ing  security  rules  for  merchants  that  accept  credit  card 
payments  to  better  guard  against  attacks,  such  as  SQL 
injection. 

Oracle  issues  boatload  of  patches 

■  Oracle  has  issued  65  fixes  for  a  wide  range  of  software 
products  as  part  of  its  quarterly  security  release,  called 
the  Critical  Patch  Update.The  patches  address  problems 
in  the  company’s  database,  application  server  and  e-busi- 
ness  suite  products,  among  others,  according  to  Oracle. 
Some  of  the  patches  are  also  designed  for  client  software 
that  works  with  Oracle’s  databases.  More  information  on 
the  patches  can  be  found  at  www.nwdocfinder. 
com/4448.  Oracle’s  next  Critical  Patch  Update  is  sched¬ 
uled  for  Oct.  17. 


“Now,  brothers  and  sisters,  if 
you  will  only  install  Linux  on 
your  computers,  they  will  be 
HEALED!” 

David  Petrie  of  Ontario,  Canada,  is  this  week's  big  winner.  Check  back  each  week 
for  the  start  of  a  new  contest.  www.networkwoiHd.com/weblogs/layer8 


IBM  grabs  CVS  outsourcing  deal 

■  IBM  last  week  won  a  10-year  contract  to  handle  the 
human-resources  department  of  drugstore  chain  CVS. 
Financial  terms  of  the  deal  were  not  disclosed,  but  it  is 
thought  to  be  worth  several  hundred  million  dollars.  IBM 
will  take  over  payroll  processing,  benefit  administration, 
employee  intranet  portals  and  other  functions  for  CVS, 
whose  workforce  has  grown  to  170,000  through  acquisi¬ 
tions  in  the  past  couple  years.  Big  Blue  said  the  CVS  con¬ 
tract  is  one  of  its  biggest  such  outsourcing  contracts  in 
recent  years  and  its  largest  in  the  retail  industry. 
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Analyzing  Microsoft-Nortel  VoIP  deal 


BY  PHIL  HOCHMUTH 

Microsoft  and  Nortel  can  learn 
much  from  each  other,  users  and 
analyst  say  as  the  companies  ally 
themselves  to  develop  unified 
communications  technology  And 
they’d  better  learn  fast. 

The  companies  last  week 
announced  a  four-year  partner¬ 
ship,  called  the  Innovative 
Communications  Alliance,  with 
the  goal  of  turning  Nortel  VoIP 
technology  into  software  mod¬ 
ules.  The  companies  will  share 
intellectual  property  and  co¬ 
develop  voice  and  messaging 
applications  designed  to  run  on 
top  of  Microsoft  servers.  Microsoft 
and  Nortel  sales  and  services 
organizations  will  be  cross- 
trained  and  offer  integrated 
Microsoft-Nortel  messaging  appli¬ 
cations  packaged  with  Nortel  net¬ 
work  infrastructure  gear. 

The  companies’  CEOs  stressed 
that  the  Innovative  Communi¬ 
cations  Alliance  goes  further  than 
past  marketing  or  interoperability 
arrangements  between  the  two 
vendors,  or  between  Microsoft 
and  other  VoIP  companies. 

“You  can  squarely  say  that 
Microsoft,  with  Nortel,  is  in  the 
business  not  just  of  unified  com¬ 
munications,  but  of  voice,  quite 
clearly  said  Microsoft  CEO  Steve 
Ballmer. 


For  Microsoft,  the  tight  partner¬ 
ship  with  Nortel  could  be  seen  as 
one  of  the  most  decisive  steps  it 
has  taken  into  the  corporate  voice- 
technology  market.  Last  month, 
Microsoft  announced  its  strategy 
to  develop  further  its  unified  com¬ 
munications  and  VoIP  technolo¬ 
gies,  using  its  Office  Communi¬ 
cations  Server  2007  platform  (for¬ 
merly  known  as  Live  Communi¬ 
cation  Server,  or  LCS)  as  the  cen¬ 
terpiece  for  Session  Initiation 
Protocol  (SlP)-based  instant  mes¬ 
saging,  VoIP  teleconferencing, 
video,  presence,  and  unified  voice 
and  e-mail  messaging. 

Microsoft  is  not  new  to  VoIP  part¬ 
nerships:  It  has  interoperability 
deals  with  Alcatel,  Avaya,  Cisco, 
Mitel,  NEC  and  Siemens  that  were 
announced  in  February  when  the 
IP  PBX  vendors’  gear  was  certified 
to  interoperate  with  Microsoft  LCS 
and  the  Office  Communicator 
2005  desktop  client. 

“This  announcement  is  not 
about  interoperability’  Ballmer 
said.“Of  course  we’ll  have  that.  But 
this  is  about  having  an  aligned 
offering  in  the  market,  beyond 
interoperability’  Ballmer  likened 
the  alliance  to  one  Microsoft  had 
in  the  1990s  with  Digital 
Equipment  Corp.,  in  which  the 
two  companies  jointly  developed 
hardware-software  packages  for 


large-scale  e-mail  networks. 

For  Nortel,  the  partnership 
comes  just  in  time,  as  it  looks  to 
reinvent  itself  in  the  enterprise 
data  market,  where  it  sits  among  a 
handful  of  competitors  far  behind 
market  leader  Cisco. 


“We  wanted  to  change  the  tra¬ 
jectory  of  [Nortel’s]  enterprise 
business,”  said  Nortel  CEO  Mike 
Zafirovski.  “Our  new  relationship 
with  Microsoft  represents  an 
opportunity  to  create  well  over 
$1  billion  in  revenue  for  Nortel  in 
the  next  [several]  years  with  the 
combination  of  [Nortel]  profes¬ 
sional  services,  voice  products 
and  data  pull-through  [sales] 
from  our  customers.” 

Meanwhile,  industry  analysts 
and  users  of  Microsoft  and  Nortel 
products  are  sorting  out  the 
pieces  and  waiting  to  see  what 
will  be  delivered. 

The  Microsoft-Nortel  partner¬ 


ship  comes  at  a  pivotal  time  for 
Bruce  Meyer,  senior  network  engi¬ 
neer  at  Toledo,  Ohio-based  Pro- 
Medica  Health  System.  His  organi¬ 
zation  recently  began  beta-testing 
Nortel’s  MCS5100  Unified  Mes¬ 
saging  Server  and  Microsoft’s  LCS. 


These  platforms  offer  different 
versions  of  IM  and  presence:  The 
Nortel  product  handles  voice 
conferencing,  and  LCS  provides 
tighter  Microsoft  Exchange  and 
Office  integration. 

“It  would  be  nice  to  eliminate  a 
lot  of  that  overlap  and  use  the  best 
features  of  each  platform,”  Meyer 
says. 

Analysts  say  the  companies  will 
have  to  learn  quickly  to  package 
an  offering  that  reflects  the  best  of 
each  company’s  skills. 

“It’s  really  important  that 
Microsoft  rolls  something  out  the 
door  that’s  high-quality’  as  a  result 
of  the  Innovative  Communications 


Alliance,  says  Zeus  Kerravala,  ana¬ 
lyst  with  Yankee  Group.  “Microsoft 
has  certainly  made  things  difficult 
for  customers  with  past  versions  of 
new  products,  and  they  can’t 
afford  to  do  that  with  voice.” 

Although  the  partnership  may 
seem  dominated  by  Microsoft  — 
as  Nortel’s  voice  technology 
becomes  software  modules  on 
Windows  servers  —  Kerravala 
says  Nortel  won’t  just  be  along  for 
the  ride.  The  vendor’s  history  of 
building  stable,  survivable  voice 
systems  lends  credibility  to 
Microsoft’s  VoIP  ambitions. 

“I  think  Nortel  is  a  much  better 
company  when  it  comes  to  qual¬ 
ity  engineering,  building  fault- 
tolerant  systems  and  obviously 
voice  in  general,”  he  says. 

The  move  to  transform  Nortel 
voice-technology  software  mod¬ 
ules  in  a  larger,  Microsoft-based 
infrastructure  is  a  deviation  from 
Nortel’s  2005  VoIP  road  map,  in 
which  it  identified  Linux  as  the 
operating  system  of  choice  for  the 
future. 

ProMedica’s  Meyer  says  he  will 
wait  to  see  how  this  plays  out  but 
is  skeptical  about  using  Windows 
as  a  main  call-processing  plat- 
form.“Nortel  has  been  moving  its 
IP  PBX  platforms  to  a  hardened 
Linux  core,  where  they  only  run 
absolutely  what  they  have  to,”  he 
says.’Td  probably  prefer  the  Nortel 
hardware  for  day-to-day  commu¬ 
nications  control  over  some  kind 
of  Microsoft  SIP  server.  I’d  like  to 
see  Microsoft  handle  more  of  the 
application  side.” 

As  Nortel’s  CEO  Zafirovski  said, 
the  deal  could  boost  Nortel’s 
enterprise  LAN  and  WAN  and 
wireless  LAN  businesses  greatly 
Those  account  for  around  5%  of 
the  market,  behind  Cisco’s  70%- 
plus  market  share  in  these  cate¬ 
gories.  Zafirovski  said  in  a  past 
interview  he  wants  to  increase 
Nortel’s  data  market  share  to  20%. 

“A  lot  of  companies  still  do  gen¬ 
eral  router  and  switch  upgrades,” 
says  Robert  Whiteley  an  analyst 
with  Forrester  Research.  “But  few 
do  it  without  the  context  of  a  larg¬ 
er  IT  initiative,”  such  as  network 
convergence,  security  or  virtual¬ 
ization  projects. 

“Nortel  has  tied  itself  to  a  much 
larger  pull-through  [partner],”  he 
says.  I  think  as  long  as  Microsoft 
and  Nortel  can  deliver  in  a  timely 
manner, this  will  shake  things  up.”B 


ForcelO  blade  brings  SONET  support 


BY  PHIL  HOCHMUTH 

ForcelO  Networks  this  week  is  expected  to 
launch  its  first  packet-over-SONET  blade, 
aimed  at  large  companies  that  need  to  con¬ 
nect  to  legacy  WAN  infrastructures  but  want 
to  avoid  deploying  stand-alone  SONET  gear 
at  the  network  edge. 

ForcelO  says  its  PoS  module  can  reduce  the 
cost  of  optical-based  network  connectivity  by 
as  much  as  50%  vs.  Juniper  or  Cisco  routers, 
because  the  module  quickly  converts  traffic 
from  SONET  to  Ethernet  frames  and  switches 
the  traffic  inside  a  lower-cost  Ethernet  chas¬ 
sis,  vs.  high-end  routers  such  as  Juniper’s  T- 
Series  or  Cisco’s  12000  or  CRS-1. 

The  FbS  blade  fits  into  ForcelO’s  E1200 
series  switches,  and  comes  in  OC-3 
(155Mbps),  OC-12  (622Mbps)  and  OC-48 

...  1Gb ps)  speeds.  ForcelO  says  it  has  devel¬ 
oped  a  SONET  framer/deframer  ASIC  that 
unwraps  incoming  IP  packets  from  SONET 
frames  and  converts  them  to  Ethernet  before 
switching  the  traffic  through  the  switch  back- 


ForcelO's  packet-over-SONET  blade  provides 
OC-3/12/48  connectivity  to  the  El  200  Ethernet 
switch. 


plane,  whereas  optical  routers  move  traffic 
through  the  device  as  SONET.  Being  Ethernet- 
based  also  allows  the  El 200  to  support  Giga¬ 
bit  and  10G  Ethernet  interfaces  at  a  lower 
cost  than  Cisco  and  Juniper  routers  that  rely 
on  Ethernet  cards,  the  vendor  says. 

“There’s  an  argument  about  whether  you 
really  can  use  a  switch  in  place  of  a  router,” 
says  Zeus  Kerravala,  analyst  with  Yankee 
Group.  “ForcelO’s  approach  makes  the  price 
much  lower;  their  device  is  built  as  90% 
Ethernet  with  a  little  bit  of  optical  built  onto 
it,  vs.  the  other  way,  where  vendors  build  a 
mostly  SONET  device,  with  a  little  bit  of 


Ethernet  built  in  on  the  front  end.” 

While  the  ForcelO  PoS  card  supports  stan¬ 
dard  SONET  speeds  and  carrier-control  pro¬ 
tocols,  such  as  Cisco’s  High-Level  Data  Link 
Control,  it  lacks  some  carrier-class  features, 
such  as  support  for  MPLS. 

ForcelO  —  which  sold  only  Ethernet  gear 
until  this  product  launch  —  says  it  is  anticipat¬ 
ing  a  move  from  SONET  to  Ethernet  in  the 
wide  area  but  decided  to  dip  into  SONET  to 
support  customers  with  legacy  network  needs. 

“Many  of  our  customers  connect  directly  to 
Ethernet  services”  in  Asia, says  Andre  Feldman, 
vice  president  of  marketing  for  ForcelO.  U.S. 
carriers  and  large  enterprises  also  connect 
over  Ethernet  with  dark  fiber  and  through 
Ethernet  services,  he  says.  As  many  organiza¬ 
tions  relocate  data  centers  to  more  remote 
areas  —  ForcelO  customer  Google  is  opening 
a  data  center  in  rural  Oregon  —  SONET  links 
are  the  most  available  network  pipes. 

The  PoS  blade  for  the  E1200  switch  starts  at 
$100,000.  ■ 


ttYou  can  squarely  say  that 
Microsoft,  with  Nortel,  is  in 
the  business  not  just  of  uni¬ 
fied  communications,  but  of 
voice,  quite  clearly. W 


Steve  Ballmer,  CEO,  Microsoft 
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Start-up  takes  aim  at  wireless  access 


BY  JOHN  COX 

A  group  of  Purdue  University 
professors  has  launched  a  start-up 
to  create  an  automatically  aiming 
wireless  antenna  system  that  reli¬ 
ably  links  users  on  vehicles  and 
boats  to  the  Internet. 

The  start-up,  called  Broadband 
Antenna  Tracking  Solutions 
(BATS),  uses  proprietary  software 
and  off-the-shelf  electronic  com¬ 
ponents  that  let  one  antenna  find, 
lock  onto  and  track  another,  even 
when  one  of  them  is  in  motion. 

The  system  lets  a  seeker  anten¬ 
na  find  a  target  one  quickly  and 
then  constantly  adjusts  the  seek¬ 
er’s  position  to  optimize  signal 
strength  and  throughput.  Be¬ 
cause  BATS  uses  directional 
antennas,  which  focus  a  radio 
signal  into  a  narrow  beam,  the 
connection  can  be  maintained 
over  longer  distances  and  is  less 
vulnerable  to  interference.  Tests 
with  the  current  BATS  proto¬ 
types  have  reached  nearly  12 
miles  over  water  and  nearly  9 
miles  over  land. 

The  system  is  designed  for 
802.11  (Wi-Fi)  and  fixed  wireless 
broadband  radios,  such  as  Motor¬ 
ola’s  Canopy  product.  In  the 
future,  WiMAX  will  be  supported, 
says  Lonnie  Bentley  vice  presi¬ 
dent  of  the  West  Lafayette,  Ind., 
company 


That  town  is  also  the  home  of 
Purdue,  where  Bentley  heads  the 
university’s  computer  and  IT  de¬ 
partment.  With  development  seed 
money  from  the  university  he  and 
two  colleagues  and  co-founders 
—  Anthony  Smith,  who  did  much 
of  the  work  on  the  algorithms,  and 
Michael  Kane  —  developed  the 
antenna  aiming  system. 

Patented  process 

The  patent  belongs  to  Purdue, 
but  the  trio  negotiated  exclu¬ 
sive  global  licensing  rights  to 
the  technology,  put  up  their 
own  money,  convinced  former 
Nextel  executive  Phil  Hockema 
to  join  as  CEO  and  launched 
the  company  in  January.  “Our 
CEO  is  doing  it  for  free  so  far,” 
Bentley  says.  The  company  is 
seeking  investors. 

Getting  wireless  antennas  of  all 
kinds  to  find  each  other  isn’t  easy 
Bentley  says,  especially  in  out¬ 
door  networks,  and  where  the 
user,  the  access  point  or  base  sta¬ 
tion  is  moving.  Installers  working 
for  wireless  service  providers,  for 
example,  may  spend  frustrating 
hours  trying  to  align  the  antenna 
at  a  customer  site  with  a  base  sta¬ 
tion  miles  away 

The  BATS  solution  comprises 
three  main  elements  (see  graph¬ 
ic).  One  or  more  off-the-shelf 


Auto-aiming  antenna  system 

Startup  BATS  uses  software  and  hardware  to  find,  track,  and  lock  onto  wireless  antennas. 
Results:  Connections  set  up  in  less  time,  optimize  bandwidth,  have  longer  range. 
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Seeker  antenna  collects  signal  strength 
data  from  target  antenna. 


B  BATS  software  calculates  target  location 
and  optimal  position  of  seeker. 

El  Servo  motors  move  seeker  into  position: 
software  tracks  positions,  adjusts  seeker. 


directional  antenna  is  packaged 
with  the  relevant  radio  or  access 
point  and  two  standard  servo 
motors,  which  can  tilt  and  swivel 
the  antenna.  Managing  the  motors 
is  a  programmable  logic  con¬ 
troller  (PLC).  In  the  BATS  proto¬ 
types  it  is  a  separate  box,  but  in 
the  final  product  it  will  likely  be  a 
small  board  incorporated  in  the 
antenna-radio-motors  package, 
the  company  says. 

At  the  heart  of  it  all 

The  heart  of  the  system  is  a 
laptop  software  program  that 


reads  the  signal  strength  of  a 
target  antenna  and  then  calcu¬ 
lates  the  optimal  position  for 
the  seeker  antenna.  The  pro¬ 
gram  passes  instructions  via  the 
PLC  to  the  servos,  which  move 
the  seeker  into  position.  If  both 
ends  of  the  link  are  stationary, 
the  software  can  lock  that  posi¬ 
tion.  If  one  end  is  mobile,  the 
software  continually  tracks  the 
target  antenna  and  adjusts  the 
seeker’s  position. 

The  prototypes  have  been  tested 
using  900MHz  Motorola  Canopy 
radios,  a  wireless  broadband  pro- 


Compliance  system  geared  to  finance 


BY  DENI  CONNOR 

The  market  for  products  that  manage  documents  for  compliance 
purposes  is  getting  crowded,  but  newcomer  Mathon  Systems  will 
attempt  to  differentiate  itself  by  focusing  on  financial  firms  and  by 
processing  unstructured  data  in  real  time. 

The  company’s  Integral  appliance  is  designed  to  identify  classify 
and  manage  documents,  spreadsheets,  e-mails  and  PDF  files.  It  con¬ 
nects  to  a  Gigabit  Ethernet  network,  where  it  monitors  data  being 
stored  on  network  file  servers  and  network-attached  storage  devices. 

Mathon’s  appliance  is  designed  for  use  by  financial  institutions  and 
banks,  companies  that  must  adhere  to  the  Securities  and  Exchange 
Commission  and  the  National  Association  of  Securities  Dealers 
(NASD)  data  management  rules  or  pay  hefty  fines. 

The  Integral  device  is  packaged  in  two  forms,  an  Audit  Solution  and 
a  Client  Privacy  Solution.The  Audit  Solution  lets  IT  or  compliance  offi¬ 
cers  generate  audit  reports  that  detail  the  life  cycle  of  every  docu¬ 
ment  on  the  network.  Reports  can  be  produced  for  a  single  document 
Of  a  class  of  documents  and  for  a  single  user  or  a  group  of  users. 

The  Client  Privacy  Solution  automates  enforcement  of  electronic 
■  (  >  rd  policies  and  provides  reporting  that  demonstrates  compliance 
to  the  Gramm  Leach-Bliley  Act  or  documents  containing  information 
that  is  accessible  on  a  need-to-know  basis. 


Information  integrity 


Mathon’s  Integral  is  designed  for  discovery  classification  and 
management  of  unstructured  content  for  purposes  of  complying 
with  assorted  regulations. 


duct.  In  one  test,  the  BATS  system 
linked  a  moving  U.S.  Coast  Guard 
boat  about  10  miles  offshore  in 
Lake  Michigan  with  a  stationary 
radio  ashore.  Another  test  involved 
the  BATS  antenna  mounted  atop  a 
moving  Chevrolet  Tahoe,  connect¬ 
ing  to  a  radio  on  a  rooftop,  at  dis¬ 
tances  up  to  8  miles,  according  to 
Bentley 

“We  lost  the  signal  in  [dense] 
forests  or  valleys,  but  it  re-estab¬ 
lished  as  soon  as  we  had  line  of 
sight,”  he  says.  Bentley  says  the 
initial  tests  indicate  the  system 
could  connect  antennas  up  to 
20  miles  apart,  depending  on 
which  radio  technology  is 
being  used. 

The  system  can  quickly  link 
vehicles  or  ships  to  distant  fixed 
wireless  base  stations.  It  can 
send  instructions  to  pilotless 
drones  to  attack  helicopters  in 
flight.  It  can  be  used  in  mobile 
or  fixed  wireless  networks  or  a 
combination,  Bentley  says. 
Sensors  mounted  on  farm  trac¬ 
tors  can  use  BATS  to  transmit 
data  using  Wi-Fi  or  fixed  wire¬ 
less  radios  instead  of  expensive, 
limited  satellite  links. 

The  final  product  will  likely  be 
a  black  box  able  to  support 
wired  and  wireless  links  to  a  lap¬ 
top  or  other  local  client  and  cus¬ 
tomer-selectable  radio-antenna 
combinations,  according  to  the 
company.  ■ 

WIRELESS  IN 
THE  ENTERPRISE 

Subscribe  to  our  free  newsletter. 
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Vyatta  to  take  on  Cisco  and  Juniper 

Company  relying  on  open  source  Linux/XORP-based  router  software  for  success. 


Open  source  routing 

Vyatta’s  Open  Flexible  Router  (OFR)  1.0  is  expected  to  launch 
this  week.  Components  needed  to  build  a  WAN  router  based 
on  the  technology  include: 

•  An  Intel-based  PC  with  a  (minimum)  500MHz  processor,  at  least  256MB  of  memory 
and  500MB  of  free  disk  space. 

•  OFR  Version  1.0  CD,  which  includes  a  Linux-based  operating  system  and  the  OFR  routing 
and  firewall  software  stack. 

•  A  PCI-based  T-1  WAN  interface  card  (Sangoma  is  Vyatta's  preferred  partner)  with 
device  drivers  included  in  the  OFR  1.0  CD. 


BY  PHIL  HOCHMUTH 

Open  source  router  start-up 
Vyatta  this  week  is  expected  to 
launch  Version  1.0  of  its  Open 
Flexible  Router,  a  software  pack¬ 
age  designed  to  run  on  commod¬ 
ity  PC  hardware,  but  match  the 
WAN  routing  and  security  perfor¬ 
mance  of  commercial  offerings 
from  Cisco,  Juniper  and  others. 

The  Open  Flexible  Router  1.0 
could  be  used  in  place  of  com¬ 
mercial  routing  gear  in  small  busi¬ 
nesses  and  companies  with  thou- 


nww.com 

Data  center  event 

Data  Centers:  The  move  away  from  fixed 
technology  "silos"  is  on.  Learn  best 
practices  to  make  your  move  to  clus¬ 
tered  servers,  grid  computing,  virtualized 
storage  and  more!  Attend  Network 
World's  free  IT  Roadmap  in  Dallas  on 
Sept.  13.  In  one  day,  seven  tracks  and 
40  IT  all-stars,  analysts,  vendors,  user 
case  studies  are  ready  to  work  for  you. 

www.nwdocfinder.com/4130 


sands  of  users.  The  company  says 
the  open  source  nature  of  the 
router  code  also  allows  for  open 
scrutiny  and  examination  of 
potential  bugs  and  weaknesses  in 
the  code,  which  could  make  it 
more  secure  than  some  other 
commercial  offerings. 

The  OFR  software  is  available  for 
download  from  the  Vyatta  Web  site 
at  www.vyatta.com.Vyatta  charges 
for  support  and  maintenance  up¬ 
grades  with  a  subscription  format. 
The  $500  OFR  Professional  Sub¬ 
scription  includes  unlimited  soft¬ 
ware  updates,  and  online/e-mail 
access  to  Vyatta’s  technical  sup¬ 
port  group  for  one  year.  The  $650 
Enterprise  Subscription  includes 
online  and  phone  support. 

Vyatta’s  software  is  based  on 
code  developed  using  the  ex¬ 
tensible  Open  Route  Platform 
(XORP), begun  in  2002  as  an  open 
source  router  software  project. 
Vyatta’s  code  combines  a  modi¬ 
fied  Linux  operating  system  with 
XORP  Users  can  build  a  Vyatta 
router  by  downloading  a  CD 
image  from  the  company’s  Web 
site  and  installing  it  on  PC  hard¬ 
ware.  The  company  works  with 
partners  such  as  Sangoma,  which 


makes  T-1  and  T-3  WAN  interface 
cards  for  x86  PC  systems,  and 
plans  to  announce  more  hard¬ 
ware  partners  soon. 

Lance  Knox,  a  network  adminis¬ 
trator  with  a  Pittsburgh-area  build¬ 
ing  supply  company  does  part- 
time  network  and  IT  work  for  local 
nonprofit  and  church  organiza¬ 
tions.  He  recently  deployed  an 
OFR  to  route  traffic  between  LANs 
in  two  buildings  at  a  local  non¬ 
profit  mental  health  facility 

“I’d  normally  use  [virtual]  LANs 
for  this  type  of  connection,”  Knox 
says.“But  since  this  is  a  nonprofit, 
we  couldn’t  afford  to  drop  a  cou¬ 
ple  grand  on  a  VLAN-capable 
switch.”  He  dug  up  an  old  PC,  in¬ 
serted  a  second  network  interface 
card,  installed  the  Vyatta  CD  and 
configured  the  directly  connect¬ 
ed  routes. 

While  Knox  works  mostly  with 
Cisco  network  equipment  in  his 
day  job,  he  thinks  the  open  source 
OFR  technology  could  someday 
have  a  future  as  a  prime-time  cor¬ 
porate  product. 

“The  technology  is  definitely 
there,  and  I’d  love  to  see  it  de¬ 
ployed  as  an  embedded  solution,” 
he  says.  Having  OFR  preloaded  on 


a  hardened  server  or  closed  net¬ 
work  appliance  would  make  the 
technology  easier  to  deploy  in  an 
enterprise  setting,  and  more  agree¬ 
able  with  company  executives 
with  reservations  about  open- 
source  technology 

“You’re  less  likely  to  convince  a 
CFO  or  CIO  that  this  old  PC  we’ve 
recycled  is  running  our  network,” 
he  says. 

The  release  of  the  open  source 
OFR  comes  almost  a  year  after  the 
issue  of  closed  source  routing 
technology  and  security  were 
raised  at  the  Black  Hat  security 
conference.  At  that  show,  Cisco 
sought  legal  action  to  stop  a  secu¬ 
rity  researcher  from  making  a  pre¬ 


sentation  on  how  weaknesses  in 
10S  software  could  be  exploited. 
Cisco  claimed  the  talk  violated  its 
trade  secrets  and  copyrights.  (See 
story  page  16.) 

“That  incident  was  kind  of  symp¬ 
tomatic  of  the  closed  source  men¬ 
tality’  says  Dave  Roberts,  vice  pres¬ 
ident  of  strategy  and  marketing  for 
Vyatta.“Cisco  is  heading  into  Black 
Hat  this  year  kind  of  with  its  tail 
between  its  legs,  being  kind  of 
apologetic  about  what  happened 
last  year.  If  anyone  wants  to  study 
our  router’s  source  code  and  do  a 
security  analysis  of  it,  we’ll  be 
more  than  happy  to  help.  We’re  not 
into  suing  people  that  are  trying  to 
better  our  systems.”  ■ 
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Black  Hat:  Cisco  to  be 
under  scrutiny  again 


AT&T 

continued  from  page  9 

technology  using  a  single  PK1  en¬ 
vironment  that’s  very  hardened  . . . 
and  extremely  well  protected,” 
Quintana  says. 

Utility  hosting  and  more 

AT&T  is  also  expanding  its  host¬ 
ing  services  and  its  Internet  Data 
Center  capacity 

The  carrier  is  offering  Utility 
Hosting  services  in  a  “controlled 
introduction,”  says  Chris  Costello, 
director  of  hosting  services.  The 
fully  managed  service  lets  cus¬ 
tomers  add  or  remove  computing 
resources  on  a  near  real-time 
basis,  she  says.  Customers  pay  for 
only  the  resources  they  use. 

Similar  utility  computing  ser¬ 
vices  are  offered  by  Sawis  Com¬ 
munications  and  IBM. 

“We  can  set  up  a  customer  using 
our  utility  computing  infrastruc¬ 
ture,  which  is  prebuilt,  within  48 
hours,”  Costello  says. 

AT&T  is  testing  the  service  with 
three  customers  and  expects  to 
announce  general  availability 
later  this  year. 

The  carrier  is  also  rolling  out  its 
Remote  Vault  Service  for  small 
and  midsize  businesses.  This  is 
essentially  a  remote  storage  ser¬ 
vice  for  server  and  PC  backup. 


Mathon 

continued  from  page  14 

The  appliance  features  manage¬ 
ment  software  that  enables  estab¬ 
lishment  of  data  backup  and 
retention  policies. 

Mathon  is  joining  a  crowded 
field  including  such  companies 
as  Kazeon.Scentric  and  StoredlQ. 
EMC  also  said  it  will  enter  the 
field  either  through  acquisition  or 
internal  development. 

Greg  Schulz,  senior  analyst  for 
StoragelO,  says  Mathon  differs 
from  others  by  processing  and 
analyzing  data  in  real  time  be¬ 
cause  it  is  written  to  storage. 

“Other  solutions  typically  pro¬ 
cess  and  analyze  the  data  after 
the  fact  based  upon  some  sched¬ 
ule  or  event,”  he  says. 

Mathon  was  founded  last  year 
by  John  Mathon,  formerly  of 
T1BCO,  and  others  from  JP 
Morgan,  Citigroup  and  Reuters. 
The  company  is  institutionally 
funded. 

Mathon  Integral  is  available  on 
a  subscription  basis  starting  at 
about  $200,000  a  year.  ■ 


Coming  from  AT&T 

The  carrier  last  week 
sketched  out  its 
development  road  map 
through  early  '07.  Here  are 
some  highlights: 

•  Remote  Worker  VoIP  service  trial. 

•  IMS  VoIP  architecture  swap, 

•  Migration  to  legacy  SBC's  unified 
messaging  service. 

•  Personal  Firewall  for  PDA  users. 

•  Two-factor  authentication  service 
under  development. 

•  BusinessDirect  portal  access 
designed  for  PDA  users. 

•  BusinessDirect  integration  with 
legacy  SBC's  services  underway. 

•  Data  center  expansion  in  U.S. 
and  overseas. 

•  New  storage  and  utility  hosting 
services. 


The  service  automatically  backs 
up  server  or  individual  PCs  daily 
over  a  customer’s  existing  net¬ 
work.  The  service  costs  about  $5 
to  $10  per  gigabyte  for  server 
backup,  and  $6  for  the  first  giga¬ 
byte  and  $2  for  each  gigabyte 
thereafter  for  PC  backup. 

AT&T  is  also  expanding  some  of 
its  existing  data  centers  and  build¬ 
ing  one  new  facility  In  April  the 
carrier  added  10,000  square  feet 
to  its  Lithia  Springs, Ga., and  Mesa, 
Ariz.,Web  hosting  facilities.  It  is 
also  in  the  process  of  expanding 
its  Ashburn.Va.,  center  to  support 
more  government  and  online 
gaming  customers. 

AT&T  also  plans  to  add  a  new 
data  center  in  Oakbrook,  Ill.,  just 
outside  Chicago,  by  year-end. 

BusinessDirect  is  AT&T’s  cus¬ 
tomer  service  portal  where  users 
can  place  and  check  on  the  sta¬ 
tus  of  orders,  issue  and  track 
trouble  tickets,  manage  account 
and  billing  information,  and 
monitor  inventory  management. 
Customers  also  can  monitor  net¬ 
work  performance. 

While  customers  have  tradi¬ 
tionally  accessed  BusinessDirect 
from  their  PCs,  AT&T  plans  to 
make  the  portal  available  on 
PDAs,  says  Robert  Sloan,  vice 
president  of  AT&T  eSales  and  ser¬ 
vices.  The  carrier  is  designing  a 
specialized  interface  for  a  variety 
of  PDAs  so  users  can  easily  view 
BusinessDirect.  The  enhance¬ 
ment  is  expected  by  the  fourth 
quarter.  ■ 


BY  ROBERT  MCMILLAN 

Cisco’s  products  will  come 
under  scrutiny  again  at  this  year’s 
Black  Hat  USA  2006  conference, 
which  kicks  off  Saturday  in  Las 
Vegas. 

Conference  organizers  say  15 
new  exploits  will  be  discussed  at 
this  year’s  event  and  that  two  of 
them  target  Network  Admission 
Control  (NAC)  and  VoIP  vulnera¬ 
bilities  that  affect  products  from 
a  number  of  vendors,  including 
Cisco. 

Security  researchers,  no  longer 
as  focused  on  digging  up  bugs  in 
core  Windows  components,  are 
looking  for  green  fields, says  Black 
Hat  Director  Jeff  Moss. 

Last  year  Cisco  sued  Black  Hat 
conference  organizers  after  secu¬ 
rity  researcher  Michael  Lynn 
demonstrated  a  method  for  run¬ 
ning  unauthorized  code  on  a 
Cisco  router.  It  was  a  difficult  tech¬ 
nical  achievement  that  had  been 
considered  impossible  by  some, 
but  Cisco  saw  it  to  be  a  dangerous 
disclosure  of  information  that 
could  be  used  to  harm  the  In¬ 
ternet’s  infrastructure. 

Black  Hat  and  Cisco  settled  the 
lawsuit  after  conference  organiz¬ 
ers  promised  not  to  disseminate 
information  on  Lynn’s  research. 
Lynn  is  not  listed  among  this 
year’s  presenters. 

A  repeat  unlikely 

It  is  unlikely  Cisco  will  sue  the 
conference  this  year,  given  that 
neither  of  the  exploits  target  Cisco 
specifically  Instead  they  relate  to 
underlying  technologies  that  are 
used  by  a  large  number  of  prod¬ 
ucts,  including  Cisco’s  NAC  and 
VoIP  products. 

One  researcher,  Insightix  CTO 
Ofir  Arkin,  will  speak  about  NAC 
technologies  “and  ways  to  by¬ 
pass  them,”  he  said  in  an  e-mail 
interview. 

A  presentation  by  3Com  and 
SecureLogix  researchers  will  ex¬ 
amine  the  Session  Initiation  Pro¬ 
tocol  (  SIP)  used  by  VoIP  systems. 
“In  it,  we  describe  and  demon¬ 
strate  many  real-world  VoIP  ex¬ 
ploitation  scenarios  against  S1P- 
based  systems  [Cisco,  Avaya, 
Asterisk] ,”  the  presenters  wrote  in 
a  description  of  their  talk. 


Researchers  will  disclose  three 
exploits  that  take  advantage  of 
bugs  in  the  Linux-based  Asterisk 
PBX  telephony  software,  confer¬ 
ence  organizers  say 
And  wireless  security  re¬ 
searchers  David  Maynor  and  Jon 
Ellch  plan  to  show  a  way  of  run¬ 
ning  unauthorized  software  on  a 
laptop  computer  by  manipulating 
buggy  code  in  the  system’s  wire¬ 
less  device  driver. 

Products  from  perennial  favor¬ 
ites  Microsoft  and  Oracle  will  also 
be  discussed,  with  three  Oracle  ex¬ 
ploits  and  four  Microsoft  exploits 
being  disclosed,  Black  Hat  offi¬ 
cials  say  There  also  will  be  discus¬ 
sion  of  two  Linux  exploits  and  one 
relating  to  Xerox’s  products. 

Researchers  will  also  demon¬ 
strate  25  new  hacking  tools  at  the 
show,  which  will  be  noteworthy 
for  its  degree  of  friendly  coopera¬ 


tion  with  technology  vendors. 
Cisco  is  a  platinum  sponsor  at 
the  show,  and  Microsoft  employ¬ 
ees  will  be  speaking  at  a  track 
devoted  entirely  to  the  compa¬ 
ny’s  upcoming  Windows  Vista 
operating  system. 

Black  Hat’s  Moss  credits  Lynn 
with  inspiring  new  research  work 
in  the  area  of  embedded  devices, 
which  is  one  of  the  hottest  areas 
of  research  at  this  year’s  confer¬ 
ence.  By  showing  how  Cisco’s 
routers  could  be  hacked  and 
made  to  run  unauthorized  code 
just  like  a  PC,  Lynn  helped  change 
the  way  researchers  think  about 
many  of  these  devices. 

“Once  he  did  that,  it  really 
opened  people’s  eyes,”  Moss  says. 
“The  amount  of  people  who  are 
now  beating  up  on  embedded 
devices  has  changed.  Now  the 
floodgates  are  opened.”  ■ 


Entrust  acquires 
Business  Signatures 

BY  ELLEN  MESSMER 

Entrust  last  week  announced  it  has  acquired  Business  Signatures,  the 
privately  held  vendor  of  the  eFraud  Detector  anti-fraud  software  used 
primarily  in  online  banking,  for  $50  million. 

Business  Signatures,  which  has  40  employees,  will  operate  as  a  divi¬ 
sion  of  Entrust  called  Entrust  Business  Signatures,  according  to  Chris 
Voice,  CTO  of  the  acquiring  company 

Entrust  has  no  immediate  plans  to  alter  product  names,  including 
eFraud  Detector.  In  addition,  Business  Signatures  President  and  CEO 
Peter  Relan,who  co-founded  the  company  in  2001,  is  expected  to  head 
up  the  new  division. 

“They’re  doing  well  there,  and  we  don’t  want  to  shake  things  up,” 
Voice  says. 

Voice  says  eFraud  Detector  works  by  “passively  monitoring  network 
traffic,  and  based  on  behavior  it  observes,  determines  whether  there’s 
suspicious  activity.”  He  says  Business  Signatures  has  about  20  cus¬ 
tomers,  including  Citibank  North  America  and  H&R  Block. 

Entrust  provides  public-key  information  products  and  the  Identity- 
Guard  multifactor  authentication  platform.  Entrusts  main  competitor  is 
RSA  Security  which  late  last  year  acquired  the  antifraud  detection 
company  Cyota. 

Voice  says  Entrust  believes  eFraud  Detector,  typically  used  in  Web 
banking,  is  less  cumbersome  to  install  than  the  Cyota  approach,  offer¬ 
ing  easier  integration  for  the  financial  services  firms  that  are  the  main 
purchasers. 

In  its  earning  statement,  Entrust  announced  second-quarter  revenue 
of  $22.1  million,  up  5%  from  the  previous  quarter  but  down  from  the 
$24.8  million  recorded  in  the  second  quarter  of  2005.  Entrust  says  it 
posted  a  net  loss  in  the  second  quarter  of  $1.3  million,  compared  with 
a  net  loss  of  $9.2  million  in  the  first  quarter  this  year.B 
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Start-up  offers  free  management  tool 


A  dash  of  systems  monitoring 

Spiceworks  IT  Desktop  software  lets  customers  discover  and 
monitor  assets  —  for  free. 
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Using  agent  software,  IT  Desktop 
discovers  client  and  host 
machines,  as  well  as  other  IP- 
based  devices,  such  as  printers 
and  phones. 
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The  software  shows  customers 
the  types  of  applications  installed 
on  client  machines  and  whether  - 
they  comply  with  company  use 
policies. 
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IT  managers  use  IT  Desktop  for  free  because 
Spiceworks  lets  content-specific  — 
technology-related  —  ads  run  in  a  vertical 
column  within  its  GUI. 


BY  DENISE  DUBIE 

An  Austin, Texas,  start-up  intends 
to  shake  up  the  IT  management 
market  for  small  to  midsize  busi¬ 
nesses  by  making  its  monitoring 
software  available  for  free. 

The  catch  is  that  customers  of 
Spiceworks’  IT  Desktop  have  to  let 
technology-related  ads,  via  Goo¬ 
gle  AdSense,  appear  on  their  man¬ 
agement  console  screens. 

Spiceworks  says  its  software  can 
be  used  to  manage  networks  with 
as  many  as  250  devices.The  agent¬ 
less  application  provides  inven¬ 
tory  status  and  monitoring  data 
on  network  systems,  the  company 
says. 

Spiceworks,  founded  in  January 
by  former  executives  of  manage¬ 
ment  automation  software  com¬ 
pany  Motive,  garnered  $5  million 
in  venture  funding  in  June.  The 
start-up  says  the  bulk  of  its  rev¬ 
enue  will  come  from  the  clickable 
ads  featured  in  its  IT  Desktop  con¬ 
sole  program.  Users  will  see  a  list 
of  clickable  ads  regarding  the  sub¬ 
ject  they  are  monitoring,  though 
more  than  three-quarters  of  the 
screen  will  still  be  devoted  to  the 
management  program. 

For  instance,  if  an  IT  manager  is 
checking  the  status  of  a  storage 
device,  the  links  listed  could 


point  to  data  backup  and  recov¬ 
ery  companies. When  users  click 
on  the  links,  advertisers  pay 
Spiceworks  a  fee. 

“We  will  get  paid  for  referring 
that  person  that  clicked  on  the  ad 
to  the  online  Web  site,”  explains 
Jay  Hallberg,  Spiceworks  founder 
and  vice  president  of  marketing, 
and  former  vice  president  of 
product  management  at  Motive. 

About  200  users  have  down¬ 
loaded  and  participated  in  an 
alpha  testing  program. 

Spiceworks  IT  Desktop  software 
installs  on  an  IT  manager’s  work¬ 
station  and  inventories  systems, 
clients  and  other  IP-based  devices 
through  agentless  discovery  meth¬ 
ods  using  open  protocols  such  as 
Windows  Management  Instru¬ 
mentation  and  Secure  Shell. 

The  software  is  best  suited  for 
SMBs,  according  to  CEO  Scott 
Abel,  who  says  he  saw  a  gap  in 
network  and  system-management 
products  available  from  industry 
veterans  such  as  BMC  Software, 
CA,  HP  and  IBM  Tivoli.  It’s  not  a 
full-blown  enterprise  manage¬ 
ment  platform,  and  would  more 
likely  compete  with  applications 
from  AdventNet,  Alloy  Software 
and  Solarwinds. 

Will  Ballard,  vice  president  and 


CTO  of  another  Austin  start-up 
called  Pluck,  downloaded 
Spiceworks  IT  Desktop  about  five 
weeks  ago  to  help  him  keep  tabs 
on  dynamic  DNS  updates  — 
which  can  make  a  device  unavail¬ 
able  and  cause  network  tests  to 
break  down.  Ballard  supports 
about  40  servers,  30  workstations 
and  30  employees  at  the  Web- 
based  company  which  helps  tra¬ 
ditional  publishing  companies 
adopt  Web  tools  such  as  blogging, 
podcasting  and  other  online  com¬ 
munity-building  programs.  He 
says  he  tracks  application 
performance  by  monitoring  re¬ 
sponse  time  from  external 
sources,  and  relies  on  Spiceworks 
to  monitor  internal  systems. 

For  Lee  Colvin,  network  admin¬ 
istrator  at  Nanocoolers,  also  based 
in  Austin,  Spiceworks  software 
helps  him  “generate  a  detailed 
network  map  including  software 
applications  installed  on  all 
machines  connected  to  the  net¬ 
work,”  which  includes  eight 
servers  and  32  workstations. 

Despite  the  unpopularity  of 
adware  —  and  the  more  mali¬ 
cious  spyware  —  Spiceworks 
users  seem  unfazed  by  the  ads 
populating  the  management 
interface. 


“The  software  doesn’t  have 
access  to  private  files  or  data¬ 
bases.  It  can  only  populate  the  ads 
based  on  the  Web  page  that  is 
right  in  front  of  you,”  Ballard  says. 


“It  is  adware,  but  compared  to  the 
cost  of  actually  buying  network 
management  software,  seeing  the 
ads  doesn’t  bother  me  a  bit.  It’s 
worth  the  trade-off.”  ■ 
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Applications 

continued  from  page  9 

lenges  exist." 

Products  such  as  Virtual  Enter¬ 
prise,  Network  Nightmare  and 
Candela  Technologies’  LANforge 
enable  network  managers  to  work 
with  application  developers  and 
educate  them  about  network  la¬ 
tency  application  round-trip  times 
and  other  network-specific  met¬ 
rics  that  application  stress  testing 
on  a  LAN-based  server  wouldn’t 
include. 

“A  little  bit  of  thought  on  the 
application  development  side 
can  have  a  huge  impact  on  per¬ 
formance,”  says  Joe  Skorupa,  re¬ 
search  director  at  Gartner.  He 
adds  that  such  devices  reduce 
application  adjustments  post¬ 
deployment,  which  not  only  im¬ 
proves  performance  but  reduces 
labor  and  costs. 

“Overseas  bandwidth  is  expen¬ 
sive  and  development/deploy¬ 
ment  becomes  more  costly  with 
each  iteration  to  make  the  appli¬ 
cation  successful,”  Wieters  ex¬ 
plains.  “My  team  would  really  like 
to  deploy  with  as  much  perform¬ 
ance  efficiency  as  possible.” 

2  Study  application 
■  traffic. 

You  can’t  manage  what  you 
can’t  see.  Network  traffic  analysis 
products  from  Fluke  Networks, 
Network  General,  Network  Instru¬ 
ments,  Network  Physics,  NetQoS 
and  NetScout  can  deliver  a  pic¬ 
ture  of  protocols,  packets  and  app¬ 
lication  traffic  crossing  network 
lines.  This  information  can  be  in¬ 
valuable  when  determining 
which  applications  consume  the 
most  bandwidth  and  which 
deserve  higher  priority  for  busi¬ 
ness  needs. 

“The  No.  1  thing  is  that  whatever 
tools  are  in  place,  they  should  tell 
you  what  traffic  is  actually  on  your 
network,”  says  George  Hamilton, 
director  of  enterprise  computing 
and  networking  at  the  Yankee 
Group.“Having  that  visibility  is  the 
first  step  toward  larger  [QoS]  ini¬ 
tiatives  and  ultimately  filtering  out 
the  less  critical  application  traffic.” 

Michael  Nix,  assistant  director 
of  IT  services  and  communica¬ 
tions  technologies  at  the  Kansas 
University  Hospital  Authority  in 
Kansas  City  Kan.,  says  under¬ 
standing  the  traffic  flowing  across 
netwoik  links  can  help  IT  staff 
decide  whether  certain  types  of 
traffic  can  be  eliminated  or  if  they 
should  consider  different  appli¬ 


cation  delivery  approaches. 

“If  we  look  at  methodologies 
that  eliminate  traffic  from  the  net¬ 
work,  for  simple  problems  like 
streaming  media,  particularly  to 
large  numbers  of  people,  we  can 
explore  multicast,  which  is  a 
send  once,  distribute  to  many 
technology’  Nix  says. 


Put  a  terminal  server 
in  place. 


Don’t  send  what  you  don’t  need. 
Often  between  data  centers  and 
branch  offices,  a  lot  of  unneces¬ 
sary  data  traveling  from  head¬ 
quarters  to  remote  offices  clogs 
network  lines. 

Chris  Majauckas,  computer 
technology  manager  for  Metro- 
corp  Publications  in  Boston, 
which  distributes  Boston  Maga¬ 
zine  and  Philadelphia  Magazine, 
says  he  put  Microsoft’s  Windows 
2000  Terminal  Server  in  place  to 
“get  rid  of  excess  data  going  back 
and  forth  between  Boston  and 
Philadelphia.”  The  product,  simi¬ 
lar  to  those  available  from  Citrix, 
lets  IT  systems  do  work  and  com¬ 
pile  results  in  Philadelphia,  and 
only  send  the  results  to  be 
viewed  by  staff  in  Boston. 

“I  am  trying  whenever  possible, 
with  as  many  applications,  to  de¬ 
crease  the  data  that  needs  to 
travel  between  offices,”  Majauckas 
says.  “Terminal  Server  works  on 
that  premise.  End  users  don’t 
need  to  know  the  data  is  not  in 
Boston,  when  all  they  want  is  to 
be  able  to  view  the  results." 


4  Invest  in  WAN  opti- 

B  mization  or  appli¬ 
cation  acceleration 
technology. 


If  the  pain  is  acute  enough, 
technology  designed  to  com¬ 
press,  cache  and  speed  applica¬ 
tion  traffic  could  be  the  fastest  fix 
and  help  avoid  an  investment  in 
bandwidth. 

For  John  Shaffer,  CIO  at  Green- 
hill  &  Co.,  a  global  investment 
banking  firm  in  New  York,  DS-3 
lines  cost  about  $6,000  per 
month  and  he  still  wasn’t  getting 
the  type  of  data  transfer  rates  he 
wanted  on  Messaging  Appli¬ 
cations  Programming  Interface 
and  Common  Internet  File 
System  traffic.  The  company  had 
just  consolidated  servers  to  a 
central  data  center  and  he  was 
dealing  with  users  accustomed 
to  having  their  applications  deliv¬ 
ered  from  local  servers. 

“1  was  looking  primarily  at  ways 
to  reduce  bandwidth  costs  but 
knew  it  was  also  an  opportunity 


to  clean  up  the  network  and  opti¬ 
mize  performance,”  Shaffer  says. 
“Exchange  was  a  problem.  If  your 
system  is  on  a  LAN  and  you  move 
it  to  a  remote  location,  there  is 
going  to  be  some  contention. 
There  is  no  way  to  mask  that  from 
end  users.” 

Shaffer  invested  in  Riverbed 
Steelhead  appliances,  five  of 
which  cost  less  than  his  yearly 
DS-3  bill,  to  accelerate  traffic  to 
the  company’s  distributed  loca¬ 
tions  in  Dallas,  London  and 
Frankfurt,  Germany  “We  achieved 
upwards  of  80%  to  90%  optimiza¬ 
tion  in  our  data  transfer  rates,”  he 
says.“It’s  not  exactly  like  being  on 
the  LAN,  but  it  does  speed  the 
traffic  for  less  cost.” 


Investigate  the  apps 
?i  on  your  servers. 

Not  all  application  performance 
issues  stem  from  long-distance 
trips  over  the  WAN.  Sometimes 
applications  act  up  right  on  the 
local  network. 

Bret  Moeller,  CIO  at  Bunker  Hill 
Community  College  in  Charles¬ 
town,  Mass.,  says  server  monitoring 
software  from  Heroix  enables  him 
to  monitor  application  perfor¬ 
mance,  react  to  problems  in  real 
time  and  plan  for  the  long  term. 

He  says  the  software  monitors 
multiple  operating  systems  and 
can  help  IT  staff  determine  when 
to  add  memory  increase  disk 
space  or  upgrade  CPUs  to  ensure 
application  availability 

“We  know  when  a  process  may 
be  using  too  much  memory  for 
instance,  and  can  take  short-term 
measures  such  as  a  reboot  or  a 
configuration  change  followed 
by  a  more  strategic  measure, 
such  as  a  hardware  component 
upgrade,”  Moeller  says. 

Yankee  Group’s  Hamilton  adds 
that  using  monitoring  software 
to  find  and  remove  unused 
applications  on  servers  can 
improve  performance  of  mis¬ 
sion-critical  applications. 

“People  are  great  at  deploying 
applications  and  terrible  at  de¬ 
commissioning  them,”  he  says. 
“These  apps  can  be  running  on 
servers,  using  resources  and  not 
serving  the  business  in  any 
capacity” 


0b  Upgrade  to  MPLS. 

For  those  planning  a  network 
upgrade,  consider  MPLS,  which 
has  gained  its  greatest  promi¬ 
nence  among  carriers  looking  to 
consolidate  voice,  data  and 
video  networks. 


Robert  Whiteley,  senior  analyst 
at  Forrester  Research,  says  net¬ 
work  managers  could  couple 
two  initiatives  —  convergence 
and  application  optimization  — 
in  one  fell  swoop  by  upgrading 
to  MPLS. 

“An  MPLS  WAN  helps  people  in 
a  couple  of  ways.  First,  most  peo¬ 
ple  can  actually  get  twice  as 
much  bandwidth  for  about  a  5% 
increase  in  costs  by  getting  rid  of 
their  frame,  ATM  or  private  links,” 
Whiteley  says.  “More  importantly 
MPLS  also  lays  the  foundation  for 
traffic  engineering  and  quality  of 
service  that  allows  for  perform¬ 
ance  optimization.” 

John  Hines,  IT  manager  at 
Crafton,  Tull  &  Associates,  in 
Rogers,  Ark.,  is  thinking  about 
MPLS,  mostly  because  Verizon  has 
planted  the  seed  in  his  brain. 
Hines  six  months  ago  invested  in 
a  Packeteer  PacketShaper  appli¬ 
ance  to  speed  traffic  among 
offices  on  the  company’s  star  net¬ 
work  that  supports  remote  loca¬ 
tions  throughout  Arkansas,  Ala¬ 
bama  and  Oklahoma,  but  now  is 
considering  MPLS. 

“MPLS  can  help  me  shape  and 
prioritize  bandwidths,”  he  says. “I 
am  talking  to  Verizon  about 
switching,  but  I  am  waiting  to 
see  if  MPLS  becomes  a  natural 
next  step.” 

7  Become  the  “network 

1  Renaissance  person.” 

Don’t  wait  for  the  application 
developers  to  come  to  you.  Seek 
them  out  and  share  your  network 
insight.  Kernels  of  knowledge 
about  network  hops,  round  trips, 
latency  bandwidth  consumption 
and  response  times  can  help 
developers  build  better  applica¬ 
tions  and  reduce  your  headaches 
when  applications  go  live. 

Industry  watchers  say  that  not 
only  have  the  job  duties  for  net¬ 
work  managers  evolved  to  include 
oversight  of  application  perform¬ 
ance,  but  a  new  role  is  emerging. 

“We  are  calling  the  new  posi¬ 
tion  the  network  Renaissance 
person,”Whiteley  says.  ■ 
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IT  Roadmap:  Dallas 

Appliances  that  boost  application  accelera¬ 
tion  have  penetrated  the  enterprise.  Learn 
how  an  integrated  plan  turns  data  centers 
into  profit  centers.  Attend  Network 
World's  IT  Roadmap  Event  in  Dallas  on 
Sept.  13.  Sign  up  and  attend  free. 
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XG  Technology  pushes  new  form  of  wireless  VoIP 


BY  TIM  GREENE 

New  low-power,  long-reach  wire¬ 
less  technology  could  support 
metropolitan  VoIP  services  within 
a  year,  improving  mobility  on 
campuses  and  within  18  miles  of 
base  stations. 

XG  Technology  is  starting  to  sell 
wholesale  a  wireless  VoIP  service, 
called  xMax,  to  ISPs  that  is  low- 
cost  and  uses  little  power  com¬ 
pared  with  other  technologies.  It 
hopes  to  expand  the  service  over 
the  next  year  to  include  Internet 
access  and  video.  The  company 
says  xMax  can  send  a  3.7Mbps  sig¬ 
nal  18  miles  with  a  directional 
antenna  using  38  milliwatts  and 
could  provide  phone  coverage  to 
Ft.  Lauderdale,  Fla. ,  for  $3.2  million 
in  infrastructure  costs  vs.  $299  mil¬ 
lion  for  3G  wireless. 

XG  Technology  supplies  local 
ISPs  a  base  station  that  supports 
an  initial  500  simultaneous  phone 
calls  and  puts  out  bandwidth 
equivalent  to  17M  to  18Mbps.The 
company  makes  arrangements 
with  a  VoIP  service  provider  for 
network  services  and  furnishes 
the  link  between  the  base  station 
and  the  network  or  lets  the  ISP 
acquire  the  link  in  accordance 
with  xG  specifications. 

Two  drawbacks  of  the  xMax  ser¬ 
vice  are  that  there’s  no  roaming 
coverage  and  the  service  areas  of 
its  small  ISP  customers  don’t  over¬ 
lap.  To  avoid  being  cut  off,  users 
have  to  stay  within  range  of  their 
ISP’s  antennas.The  upside  for  busi¬ 
ness  is  that  with  xMax  they  would¬ 
n’t  have  to  rely  on  Wi-Fi  access 
exclusively  for  corporate  wireless 
phones.  A  dual-mode  Wi-Fi/xMax 
phone  would  seek  the  xMax  net¬ 
work  if  a  particular  Wi-Fi  access 
point  were  overloaded.  ISPs  would 
add  base  stations  in  a  local  phone 
market  to  handle  more  customers, 
not  to  expand  the  area  that  is  cov¬ 
ered,  the  company  says. 

The  technological  advantage  of 
xMax  is  that  it  can  cram  more 
information  onto  fewer  radio 
waves  than  other  transmission 
methods,  including  Code  Division 
Multiple  Access  and  WiMAX. 
xMax  uses  single-cycle  modula¬ 
tion  to  deliver  longer-range  and 
lower-power  radio  frequency  com¬ 
munications,  in  which  single-wave 
cycles  are  modulated  to  represent 
one  or  more  bits  of  data,  XG 
Technology  says.  This  is  different 
from  transmission  methods  that 
use  tens  to  hundreds  of  thousands 


of  cycles  to  represent  a  bit.  “With 
each  additional  cycle  representing 
more  [radio  frequency]  power, 
getting  the  job  done  with  fewer 
cycles  translates  into  more  power- 
efficient  RF  transmissions,”  the 


company  says.  XG  Technology’s 
gear  operates  in  the  unlicensed 
range  of  902G  to  928GHz. 

A  Swedish  firm  is  making 
handsets  for  the  initial  launch 
of  the  xMax  service.  The  hand¬ 


sets  will  be  sold  by  authorized 
dealers  to  ISPs  to  provide  to 
customers. The  next  step  will  be 
to  add  Internet  access  to  the 
service,  then  video,  both  of 
which  could  be  done  via  soft¬ 


ware  upgrades  to  the  phones 
and  base  stations,  the  company 
says.  xMax  has  two  pricing 
plans  —  $40  per  month  for 
1,500  minutes  or  $50  per  month 
for  unlimited  calling.  ■ 


OPNET  ACE  is  the  most  powerful 
solution  for  rapid  performance 
troubleshooting.  It  shows  you  exactly 
how  network,  system,  and  application 
behavior  affect  end-to-end 
performance.  With  ACE,  you  can 
pinpoint  the  source  of  a  problem,  so 
time  and  money  aren't  spent  in  the 
wrong  places. 

The  most  successful  organizations  in 
the  world  rely  on  OPNET's  advanced 
analytics  for  networks,  servers,  and 
applications. 
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YOUR  NETWORK  APPLICATIONS 
ARE  ALWAYS  ON. 

NEVER  STUCK  IN  TRAFFIC. 

NEVER  SICK  FROM  BAD  SEAFOOD. 
AND  NEVER  HAVE  "A  MOMENT." 


OVERACHIEVE 


F5  gives  you  access  to  your  network  applications 


anytime,  anywhere.  Plus,  they'll  run  65%  faster 


on  average  while  remaining  safe  and  secure. 


The  F5  mission  is  to  make  your  applications 
do  what  they  were  designed  to  do:  perform. 
More  than  10,000  organizations  around 
the  world  overachieve  with  F5.  Can  yours? 


THE  WORLD  RUNS  BETTER  WITH  F5 

WWW.F5.COM 
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NET  INFRASTRUCTURE 

SECURITY  m  SWITCHING  ■  ROUTING  HVPNS  ■  BANDWIDTH  MANAGEMENT  H  VOIP  B  WIRELESS  LANS 


Short  Takes 


■  Wavelink  this  week  plans  to 
release  Version  6.0  of  its  mobile  ter¬ 
minal  emulation  software,  which 
now  includes  the  Wavelink  Indus¬ 
trial  Web  Browser.  The  IWB  is  a 
Windows  plug-in  for  Internet  Ex¬ 
plorer  that  adds  a  range  of  features 
for  mobile  computing.  It  has  inter¬ 
faces  with  bar  code  reader,  mag¬ 
netic  stripe  readers  and  other  peri¬ 
pherals,  and  a  feature  that  sus¬ 
pends  the  application  when  it's  out 
of  range  of  a  wireless  access  point. 
Using  a  single  button,  handheld 
users  can  toggle  between  Web 
applications  and  conventional  ter¬ 
minal  emulation  screens.  Wavelink 
TE  6.0,  which  is  expected  to  ship  at 
the  end  of  July,  is  priced  at  $199; 
the  Industrial  Web  Browser  costs 
$89. 

■  HP  researchers  have  created  a 
miniature  wireless  data  chip  the 
size  of  a  grain  of  rice.  The  tiny 
radio  can  be  attached  to  or  embed¬ 
ded  in  almost  any  object,  linking  it 
and  its  data  to  the  Internet. 

Dubbed  Memory  Spot,  the  experi¬ 
mental  chip,  about  2mm  by  4mm,  is 
based  on  CMOS  technology,  widely 
used  for  a  range  of  chip  designs. 
The  antenna  is  built  into  the  chip. 
According  to  an  HP  statement,  the 
data-transfer  rate  is  10Mbps,  which 
is  about  10  times  faster  than 
Bluetooth  and  comparable  to  IEEE 
802.11b  wireless  LAN  radios. 
Working  prototypes  have  been 
tested  with  a  storage  capacity  of 
256Kbits  to  4Mbits.  That's  enough 
to  store  a  very  short  video  clip,  sev¬ 
eral  images  or  dozens  of  pages  of 
text,  according  to  HP.  The  chip 
would  be  used  in  conjunction  with 

a  tiny  read/write  device,  with  both 
components  incorporated  into  a 
cell  phone,  printer,  digital  camera 
or  other  object.  The  Memory  Spot 
design  is  self-contained,  so  no 
separate  battery  or  other  external 
electronics  are  needed.  HP  sees 
the  tiny  chip  as  a  fit  for  a  wide 
range  of  applications,  bringing  new 
sources  of  digital  data  into  the 
network. 


Start-up  targets  network  access 


ELLEN  MESSMER 

Start-up  Apere  this  week  plans  to  intro¬ 
duce  a  LAN-based  access-control  appli¬ 
ance  for  keeping  track  of  users’  network 
access  rights  and  blocking  unauthorized 
attempts  to  gain  access  to  resources. 

Apere’s  Identity  Managed  Access  Gateway 
(IMAG)  appliance  will  reside  next  to  any 
Layer  3  Ethernet  switch  to  inspect  IP-based 
traffic  to  determine  whether  the  user  has 
permission  to  access  the  resources  behind 
the  switch.  The  IMAG  appliance  aggregates 
this  user  identity-management  information 
through  software-based  collectors  that  can 
poll  a  variety  of  databases  and  applica¬ 
tions,  including  those  from  Siebel  and 
Oracle.  A  larger  collection  library  is  under 
development. 


With  the  IMAG  appliance,  Apere  is  com¬ 
peting  most  directly  with  Mirage  Networks, 
another  start-up  specializing  in  access 
control,  according  to  Mounil  Patel,  re¬ 
search  director  in  information  security  at 
Aberdeen  Group. 

“IMAG  has  the  ability  to  allow  or  disal¬ 
low  access  to  resources  based  on  who  the 
person  is,  not  just  the  IP  address,”  Patel 
says.  “They  are  binding  identity  with 
access  information." 

“When  a  login  happens  with  a  user,  we 
know  what  rights  he’s  got,”  says  Ram  Jayam, 
Apere  founder  and  CEO.  “If  our  appliance 
says  the  user  doesn’t  have  an  account,  we 
deny  that  user  access  rights.” 

According  to  Apere,  the  IMAG  appli¬ 
ance  inspects  traffic  at  speeds  as  high  as 


600Mbps  to  determine  whether  users  are 
authorized.  Apere  expects  IMAG  to  be 
most  widely  used  in  enterprises  with  500 
to  10,000  users. 

With  the  consolidation  of  user  identity 
in  one  place,  IMAG  can  establish  a  “rov¬ 
ing  set  of  policies"  for  user  permissions, 
Aberdeen  Group’s  Patel  says.  “For  in¬ 
stance,  it  can  establish  if  a  user  is  coming 
in  by  VPN;  that’s  fine,  but  if  a  user  is  trying 
to  log  in  through  an  outsourcing  center 
in  another  country,  that  might  not  be 
allowed.” 

Apere  IMAG  starts  at  $15,000.B 

SECURITY 

Subscribe  to  our  free  newsletter. 
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TOLLY  OH  TECHNOLOGY 

Kevin  Tolly 


When  I’m  not  at  the  beach,  the  slower 
office  environment  of  summer  is  a  good 
time  to  catch  up  on  industry  trends.  Over 
the  years,  I’ve  been  most  fascinated  by 
the  inexorable  “have  to  happen”  trends 
that  never  materialize  —  Open  Systems 
Interconnections  is  my  favorite  exam¬ 
ple.  As  I  catch  my  breath  in  our  summer 
break,  I  wonder  if  IPv6  might  end  up  in 
the  same  category,  at  least  as  far  as  the 
enterprise  is  concerned. 

At  The  Tolly  Group,  our  business  is  eval¬ 
uating  IT  across  a  wide  range  of  product 
areas  —  switching,  access  routers,  secu¬ 
rity,  VoIP  wireless  LAN,  messaging  and  so 
forth.  As  I  look  back  on  the  last  year  of 
projects,  there  were  many  things  in  com¬ 
mon  as  lines  blurred  among  product 
types.  But  the  one  element  consistently 
absent  was  IPv6. 

Vendors  come  to  us  to  get  independent 
certification  of  their  solution’s  capabilities. 
They  are  largely  driven  by  what  their 
prospective  customers  want  to  see  proven. 
Can  the  absence  of  requests  for  inclusion 
of  IPv6  in  test  scenarios  reflect  a  lack  of 
interest  on  the  part  of  the  enterprise  cus¬ 
tomer?  I  think  it  does. 

According  to  the  IPv6  Web  site 


IPv6  enterprise  outlook 


(www.nwdocfinder.com/4428),  the  world 
needs  to  replace  the  existing  IPv4:“Most  of 
today’s  internet  uses  IPv4,  which  is  now 
nearly  20  years  old.  IPv4  has  been  remark¬ 
ably  resilient  in  spite  of  its  age,  but  it  is 
beginning  to  have  problems.  Most  impor¬ 
tantly  there  is  a  growing  shortage  of  IPv4 
addresses,  which  are  needed  by  all  new 
machines  added  to  the  Internet.  IPv6  fixes 
a  number  of  problems  in  IPv4,  such  as  the 
limited  number  of  available  IPv4  ad¬ 
dresses.  It  also  adds  many  improvements  to 
IPv4  in  areas  such  as  routing  and  network 
autoconfiguration.  IPv6  is  expected  to 
gradually  replace  IPv4,  with  the  two  coex¬ 
isting  for  a  number  of  years  during  a  tran¬ 
sition  period.” 

But  these  are  problems  network  execu¬ 
tives  do  not  seem  to  notice.  While  the 
address  shortage  is  real,  the  winning  com¬ 
bination  of  network  address  translations 
(NAT)  in  firewalls  combined  with  VPN  tech¬ 
nology  has  made  most  enterprises  immune 
from  that  issue. 

Using  this  technology  combination,  the 
enterprise  can  implement  a  private  IPv4 
address  space  without  caring  whether  the 
address  space  is  in  use  elsewhere  (which 
it  certainly  is).  VPN  tunnels,  using  IP- 
Sec/Foint-to-Point  Tunneling  Protocol  or 
SSL,  let  remote  offices,  mobile  users  and 
business  partners  tunnel  into  the  private 
corporate  address  space  across  existing 
IPv4  networks. 


Fortunately  today’s  firewalls  and  VPN 
endpoints  are  sufficiently  powerful  so 
there  is  little  or  no  noticeable  perform¬ 
ance  penalty  for  either  the  NAT  function 
or  the  encrypt/decrypt  associated  with 
the  VPN  tunnels. 

In  short,  it  works  just  fine.  If  you  polled 
enterprise  network  managers  and  asked 
them  the  top  10  items  that  they  want  to 
change  or  upgrade  in  their  network,  1 
doubt  IPv6  would  make  the  list. 

I’m  sure  that  some  reader  is  getting 
ready  to  write  to  me  that  IPv6  is  much 
more  important  outside  of  North  America 
and  that  it  is  being  driven  by  various  gov¬ 
ernments  requiring  IPv6  support  in  any 
new  technology  they  buy. 

I  can’t  comment  on  the  former,  but  for 
the  latter  I’ve  seen  at  least  one  instance  of 
what  1  call  “prove,  then  remove.”  I  remem¬ 
ber  seeing  one  infrastructure  vendor  that 
implemented  enough  IPv6  to  meet  the 
checklist  requirement.  Then,  apparently 
with  the  customer’s  approval,  the  IPv6 
code  was  removed  before  deployment, 
which,  naturally  was  taking  place  on  an 
IPv4  network. 

For  so  many  reasons,  IPv6  is  not  on  my 
near-term  forecast  for  the  enterprise. 

Tolly  is  president  of  The  Tolly  Group,  a 
strategic  consulting  and  independent  test¬ 
ing  company  in  Boca  Raton,  Fla.  He  can  be 
reached  at  ktolly@tolly.com. 


fact 

More  than  60% 
of  malware  now 
contains  spyware. 


fact  is 

You  have  the 
power  to  keep 
prying  eyes  out. 


The  explosion  of  spyware  in  recent  months  poses  a  significant  risk  to  your  organization’s  security. 
Backdoor  Trojans,  botnet  worms,  adware,  keyloggers,  dialers  —  the  ways  in  which  hackers  can  steal 
data,  impair  networks  and  damage  reputations  are  radically  changing  the  way  you  need  to  safeguard 
confidential  information. 

Sophos’s  integrated  threat  management  solutions  provide  reliable  cross-threat  prevention  and  multi-tier 
protection.  Join  the  35  million  business,  education  and  government  users  in  150  countries  who  already 
trust  their  network  security  to  Sophos.  Get  the  facts  at  www.sophos.com. 


SOPHOS 

secured. 
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INIEBPBISE  COMPIfTlHG 

WINDOWS  ■  LINUX  ■  UNIX  ■  SERVERS  P  STORAGE  H  GRID/UTILITY  W  MOBILE  COMPUTING 

Six  storage  companies  to  watch 

Managing  unstructured  data,  data  deduplication  among  hot  areas. 


BY  DENI  CONNOR 

The  number  of  enterprise  network- 
oriented  start-ups  has  been  dwindling, 
though  storage  is  one  segment  of  the  indus¬ 
try  where  plenty  of  newcomers  have 
popped  up  and  continue  to  emerge.  Some 
have  been  snapped  up  by  larger  compa¬ 
nies  such  as  CA  and  EMC  over  the  past  year, 
and  a  few  have  even  dared  to  go  public, 
while  others  are  still  going  it  alone  as  they 
focus  on  areas  such  as  wide-area  file  ser¬ 
vices,  data  deduplication,  security  change 
management  and  virtual  tape. 

Here  are  six  storage  companies  to  watch: 

Company:  Abrevity 

Founded:  January  2003 

Based:  Cupertino,  Calif. 

Primary  business:  FileData  Classifier  and 
Analyzer  intelligent  information  manage¬ 
ment  software. 

Why  it  is  worth  watching:  Software  and 
appliances  that  can  be  used  to  identify,  clas¬ 
sify  and  manage  unstructured  data  —  files, 
Excel  spreadsheets  and  PDFs  —  are 
increasingly  being  deployed  by  customers 
interested  in  regulatory  compliance,  and 
archiving  and  retrieving  their  data.  Arkivio, 
Kazeon,  Njini,  Scentric  and  StoredlQ  are 
some  of  the  companies  in  this  field. 

How  the  company  got  its  start:  The 
founders  were  looking  to  solve  information 
management  issues  they  had  seen  in  their 
previous  professional  lives  at  global  file  sys¬ 
tem  company  Acirro. 

Funding:  Privately  funded. 

CEO:  Richard  Preston,  formerly  of 
PricewaterhouseCoopers 

Who’s  using  the  products:  BD 
Biosciences,  Cox  Communications  and 
Stanford  University 

How  the  company  got  its  name:  The 
founders  wanted  a  name  that  would  put  it 
at  the  top  of  alphabetical  lists. 

Company.  Data  Domain 

Founded:  October  2001 

Based:  Santa  Clara 

Primary  business:  Selling  DD400  Enter¬ 
prise  Series  data  deduplication  and  com¬ 
pression  appliances. 

Why  it  is  worth  watching:  A  big  move  is 
underway  in  businesses  to  back  up  data  to 
disk  rather  than  tape.  .  .  .  Data  Domain’s 
appliance  compresses  and  deduplicates 
the  data  —  it  identifies  the  unique  data  ele¬ 


ments  that  need  to  be  stored,  migrated  or 
managed. 

How  the  company  got  its  start:  The 

founders  got  together  to  determine  how  to 
use  disk  for  data  protection. 

Funding:  $41  million  from  Greylock,  New 
Enterprise  Associates  and  Sutter  Hill 
Ventures. 

CEO:  Frank  Slootman, formerly  of  Borland 
Software 

Who’s  using  the  product:  Children’s 
Hospital  Boston,  Documentum,  EFI  and 
Quicken  Loans. 

How  the  company  got  its  name:  It  wanted 
to  come  up  with  a  name  that  showed 
where  data  lived. 

Company:  Diligent  Technologies 

Founded:  June  2002 

Based:  Framingham,  Mass. 

Primary  business:  ProtecTier  data  dedu¬ 
plication  software,  VTF  Open  and  VTF 
Mainframe  virtual  tape  library  appliances. 

Why  it  is  worth  watching:  As  companies 
attempt  to  save  space  in  data  centers,  back 
up  data  faster  and  save  acquisition  costs  for 
magnetic  tape,  there  is  a  need  for  a  technol¬ 
ogy  that  emulates  tape  backup.  Diligent  was 
the  first  to  realize  this  when  it  introduced  its 
VTF  Mainframe  product. . . .  The  company 
has  since  expanded  into  virtual  tape 
libraries  for  open  systems  and  added  dedu¬ 
plication  and  compression  technology  to  its 

products _ Competitors  include  start-ups 

such  as  Sepaton  and  storage  giants  such  as 
EMC  and  Hitachi  Data  Systems. Virtual  tape 
libraries  are  being  introduced  as  capabili¬ 
ties  from  most  storage  hardware  vendors. 

How  the  company  got  its  start:  EMC  spun 
off  its  Israeli  R&D  facilities  in  2002  to  Doron 
Kempel  and  MosheYanai.both  EMC  execu¬ 
tives  who  had  left  the  company  The  Diligent 
team  developed  a  virtual  tape  library  prod¬ 
uct  for  mainframes  called  CopyCross. 

Funding:  $40  million  from  Accel  Partners, 
Matrix  Partners  and  Gemini  Israel  Funds. 

CEO:  Doron  Kempel,  formerly  of  EMC 

Who’s  using  the  product:  CUNA  Mutual 
and  Union  Pacific  Railroad. 

How  the  company  got  its  name:  Man¬ 
agement  looked  for  a  name  that  reflected 
characteristics  necessary  to  succeed. 

Company.  Mimosa  Systems 

Founded:  December  2003 

Based:  Santa  Clara 


Primary  business:  NearFbint  for  Microsoft 
Exchange  continuous  data  protection  and 
archiving  software. 

Why  it  is  worth  watching:  The  amount  of 
data  that  must  be  archived  for  compliance 
is  increasing.The  source  of  most  of  this  data 
is  Microsoft  applications  such  as  Exchange 
and  Word. . . .  Nearly  every  brokerage  has 
adopted  some  type  of  e-mail  archiving  soft¬ 
ware  as  the  result  of  Securities  and 
Exchange  Commission  rules.  Protecting 
this  data  is  also  important.  .  .  .  Mimosa  and 
vendors  such  as  Microsoft  and  Symantec 
have  set  out  to  introduce  software  that 
backs  up  this  data  continuously  and  which 
any  user  can  recover. 

How  the  company  got  its  start:  Founders 
T.M.  Ravi  and  Roy  D’Souza  saw  that  there 
was  a  significant  amount  of  data,  such  as 
user-generated  files, documents  and  e-mail, 
that  was  largely  unmanaged.They  set  out  to 
develop  a  system  that  could  manage  and 
archive  it. 

Funding:  $17.5  million  from  Clearstone 
Venture  Partners,  JAFCO  Ventures,  August 
Capital  and  DOT  EDU  Ventures. 

CEO:  T.M.  Ravi,  formerly  of  Feakstone  and 
CA 

Who’s  using  the  product:  Affiliated 
Computing  Services, AAA, America’s  Health 
Insurance  Plans,  Foster’s  Wine  Estates 
Americas,  Sears  Home  Improvement 
Products.Virtua  Health, and  Pacific  Gas  and 
Electric. 

How  the  company  got  its  name:  It  was 

taken  from  the  name  of  the  street  Ravi  lived 
on. 

Company:  MonoSphere 

Founded:  March  2001 

Based:  Redwood  City  Calif. 

Primary  business:  Storage  Horizon  capac¬ 
ity  management  software. 

Why  it  is  worth  watching:  Capacity  man¬ 
agement  of  storage  resources  is  common  in 
the  mainframe  world,  where  estimating  the 
amount  of  disks  you  will  need  to  buy  is  a 
complicated  affair.  Capacity  management 
also  is  needed  in  the  open  systems  market. 
.  .  .  IT  managers  typically  have  a  difficult 
time  determining  not  only  storage  utiliza¬ 
tion  but  deciding  when  they  will  need 
more  disks  and  when  they  should  buy  in 
order  to  get  the  best  ROI. 

How  the  company  got  its  start:  It  was 
founded  to  do  storage  virtualization  but 


transitioned  into  capacity  management. 

Funding:  $30  million  from  ComVentures 
and  Lightspeed  Ventures. 

CEO:  Ray  Villaneuve,  formerly  of  Sand  Hill 
Systems  and  Network  Appliance 

Who’s  using  the  product:  Not  disclosed. 

How  the  company  got  its  name:  The  word 
MonoSphere  comes  from  one  vision  of  the 
world  viewed  through  one  pane  of  glass. 

Company:  Onaro 

Founded:  January  2002 

Location:  Boston 

Primary  business:  SANscreen  change 
management  software. 

Why  it  is  worth  watching:  Making  un¬ 
planned  configuration  changes  to  a  stor¬ 
age-area  network  can  affect  data  and  prove 
time-consuming.  . . .  Onara  has  the  market 
largely  to  itself,  though  EMC  is  heading  in 
this  direction  through  its  Smarts  acquisi¬ 
tion,  and  companies  such  as  Alterpoint 
focus  on  network  change  management. 

How  the  company  got  its  start:  The 
founders,  who  came  from  the  Israeli 
Defense  Forces,  found  that  what  was  hap¬ 
pening  in  the  intelligence  community 
could  be  extended  to  IT. 

Funding:  $9.8  million  from  the  Cedar 
Fund  and  Newbury  Ventures. 

CEO:  Douglas  McNary  formerly  of  Motive 
and  Tivoli 

Who’s  using  the  product:  State  Street 
Global  Advisors,  Caregroup,  Countrywide 
Financial,  AOL,  JetBlue  Airways,  Priority 
Health  and  Wyeth  Pharmaceuticals. 

How  the  company  got  its  name:  It’s  the 
name  of  the  Japanese  restaurant  where  the 
founders  hashed  out  their  plans.  ■ 
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Storage  event 

Data:  How  you  store  and  manage  it  can  make  or 
break  your  enterprise.  Learn  best  practices  to 
comply  with  new  regulations  and  protect  your  com¬ 
pany.  Attend  Network  World's  free  IT  Roadmap  in 
Dallas  on  Sept.  13.  One  day,  seven  tracks  and  40  IT 
all-stars,  analysts,  vendors,  user  case  studies 
ready  to  work  for  you. 

www.nwdwfinder.com/413Q 
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THIS  NETWORK 


STEERS  CLEAR 
OF  DANGER 


MICROSOFT.COM/SECURITY/IT 

Microsoft- 


Find  tools  and  guidance  to  defend  your  network  at  microsoft.com/security/IT 


►  Free  Tools  and  Updates:  Streamline  patch  management 
with  automated  tools  like  Windows  Server™  Update  Services. 
And  verify  that  your  systems  are  configured  for  maximized 
security  with  Microsoft*  Baseline  Security  Analyzer. 

►  Microsoft  Security  Assessment  Tool:  Complete  this  free, 
online  self-assessment  to  evaluate  your  organization's 
security  practices  and  identify  areas  for  improvement. 


*  Antivirus  for  Exchange:  Download  a  free  trial  of  Antigen*  for 
Exchange  and  arm  your  e-mail  server  with  powerful  multi-engine 
protection  from  viruses,  worms,  and  inappropriate  content. 

►  Learning  Paths  for  Security:  Take  advantage  of  in-depth 
online  training  tools  and  security  expert  webcasts  organized 
around  your  specific  needs.  Then  test  your  security  solutions 
in  virtual  labs,  all  available  on  TechNet. 


C  2005  Microsoft  Corporation.  All  rights  reserved  Microsoft,  Antigen,  and  Windows  Server  are  either 
registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries. 
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Where  Can  You  Turn  for 
a  Total  Solution? 

As  a  total  solutions  provider,  NEC 
understands  the  complexities  today’s 
converged  networks  can  present  to  your 
business.  With  our  proven  experience, 
we  know  what  it  takes  to  help  you  avoid 
traveling  in  the  wrong  direction. 

NEC  delivers  the  most  choices  of  IP 
communications  platforms  to  meet  the 
unique  needs  of  your  business.  Add  to 
that  a  strong  portfolio  of  applications  and 
services,  and  before  you  know  it,  your 
business  is  traveling  in  the  direction  of 
improved  customer  experience,  enhanced 
employee  productivity,  increased  revenue 
generation  and  maximum 
return  on  investment. 


Why  go  in  different  directions  when  you  can 
focus  on  a  Total  Solution?  Turn  to  NEC! 


www.necunified.com/ip 
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AOL  launches  AIM  Pro 
for  business  users 


Offering  seeks 
to  challenge 
Lotus  Sametime. 

BY  PETER  SAYER,  IDG  NEWS  SERVICE 

AOL  last  week  launched  a  new,  free, 
instant  messaging  application  for  busi¬ 
ness  customers.  AIM  Pro  Professional 
Edition  integrates  with  Microsoft 
Outlook  corporate  directories  and  calen¬ 
dars,  encrypts  messages  and  scans  them 
for  viruses,  and  offers  quick  access  to 
WebEx  business  conferencing  services, 
the  company  says. 

About  14  million  people  use  AIM  as  a 
daily  business  tool,  AOL  says.  The  com¬ 
pany  hopes  they  will  see  its  AIM  Pro  PE 
software  as  a  tool  not  just  for  secure  IM, 
but  also  for  secure  file  sharing  or  hosting 


Short  Takes 


■  Qwest  last  week  announced  a 
network  migration  service  for  cus¬ 
tomers  looking  to  replace  frame 
relay  and  legacy  data  services  with 
MPLS-based  offerings.  The  carrier’s 
project  management  offering  for  its 
iQ  Networking  enterprise  VPN  ser¬ 
vice  is  intended  to  make  the  transi¬ 
tion  to  iQ  Networking  from  legacy 
services  less  complicated  and 
resource  intensive.  It  provides  busi¬ 
ness  customers  with  a  manager  for 
the  daily  tasks  required  before,  dur¬ 
ing  and  through  completion  of  the 
migration  to  iQ  Private  Port  ser¬ 
vices.  Qwest  launched  iQ  Network¬ 
ing  in  early  2004  as  the  company's 
convergence  platform  supporting  a 
range  of  applications,  such  as  VoIP, 
messaging  and  other  IP  communi¬ 
cations.  The  one-time  fee  for  iQ 
Networking  project  management  is 
based  on  port  size.  Qwest  says  it 
will  waive  the  fee  “for  a  limited 
time"  for  customers  that  sign  long¬ 
term  contracts. 


online  meetings  with  voice,  video  and 
collaborative  working  tools. 

Although  there  are  already  enterprise 
IM  tools  on  the  market, such  as  IBM  Lotus 
Sametime,  most  business  IM  users  make 
do  with  free  tools  intended  for  con¬ 
sumers,  AOL  says. 

AOL  faces  renewed  competition  in  the 
enterprise  services  market.  Messaging 
rival  Microsoft  last  week  announced 
plans  to  link  up  with  Nortel  to  integrate 
IM  with  traditional  telecommunications 
and  conferencing  services. 

AIM  Pro  PE  is  available  as  a  free  down¬ 
load  from  www.aol.com/aimpro.  It  re¬ 
places  the  basic  AIM  application,  and  will 
automatically  import  contact  lists  and 
account  information  from  previous  ver¬ 
sions,  the  company  says. 

Alongside  the  regular  IM  functionality, 
AIM  Pro  PE  adds  WebEx  access  to  busi¬ 
ness  conferencing  services,  which  lets 
users  join  voice  or  video  conferences 
from  within  the  AIM  interface.  To  create 
conferences  and  collaborative  work¬ 
spaces,  however,  AIM  Pro  users  need  to  set 
up  an  account  with  WebEx,  which 
charges  from  33  cents  per  person,  per 
minute  for  the  conference,  according  to 
that  company’s  Web  site.  Basic  IM  com¬ 
munications  remain  free. 

As  an  alternative  to  the  often  obscure 
and  quirky  screen  names  that  identify 
users  of  the  consumer  AIM  service,  AIM 
Pro  PE  users  also  can  identify  themselves 
using  their  business  e-mail  address.  From 
within  the  AIM  Pro  interface,  users  can 
search  corporate  directories,  check  their 
Outlook  calendar,  send  IM  or  e-mails  to 
contacts  listed  in  the  directory  or  calen¬ 
dar,  and  access  business  information  or 
enterprise  podcasts. 

AIM  Pro  PE  users  can  communicate 
with  more  than  80  million  users  of  IM  ser¬ 
vices  on  AOL’s  network,  including  ICQ 
and  Apple’s  iChat.  AOL  also  has  agree¬ 
ments  that  let  it  exchange  traffic  with 
users  of  Microsoft’s  Live  Communications 
Server  and  IBM’s  Lotus  Sametime,  and 
other  IM  services  including  Jabber, 
Antepo  and  Parlano.  ■ 

MESSAGING 

Subscribe  to  our  free  newsletter. 
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Strategies 
to  secure 
VoIP  nets 


You’ve  probably  already  heard  about 
the  latest  VoIP  scam:  vishing. 

It  works  as  follows:  An  unwary  user 
gets  an  e-mail  (or  an  automated  phone 
call)  advising  him  that  his  credit  card  is 
displaying  fraudulent  activity,  and  warn¬ 
ing  him  to  call  a  phone  number  imme¬ 
diately.  It’s  answered  by  a  computer¬ 
generated  voice  instructing  him  to  enter 
the  credit  card  number  and  other  iden¬ 
tifying  details  (security  code  or  user’s 
date  of  birth). 

The  VoIP-specific  part  of  the  scam  has 
to  do  with  the  phone  number.  Unlike  with 
traditional  telephony,  it’s  fairly  straightfor¬ 
ward  for  a  potential  scammer  to  obtain 
an  800  or  local  number,  set  up  the  system 
and  start  collecting  credit  card  numbers. 
With  traditional  telephony,  phone  compa¬ 
nies  typically  confirm  a  business  is  legiti¬ 
mate  and  assign  local  numbers  only  to 
companies  with  physical  facilities  in  a 
specific  geography. 

Vishing’s  just  the  latest  VoIP  security  hor¬ 
ror  story  As  Network  World  reported  last 
week  (www.nwdocfinder.com/4436), 
VoIP  systems  —  including  the  well-known 
open  source  package  Asterisk  —  can  be 
vulnerable  to  distributed  denial-of-service 
(DoS)  attacks,  which  demolish  a  compa¬ 
ny’s  ability  to  make  or  receive  calls. 

And  of  course  there’s  the  well-known 
FoIP  (fraud  over  IP)  case  in  which  two 
men  hacked  into  corporate  and  service 
provider  networks  and  routed  an  esti¬ 
mated  10  million  minutes  of  calls 
through  them,  leaving  the  victims  paying 
as  much  as  $300,000  apiece  in  intercon¬ 
nect  fees.  Such  cases  are  on  the  rise. 

What  should  companies  do  to  protect 
themselves  against  the  new  security 
threats  and  vulnerabilities  posed  by 
VoIP?  For  starters,  make  sure  there’s 
someone  on  staff  who  explicitly  assumes 
responsibility  for  VoIP  security.  This  may 
sound  obvious  to  some,  but  you  wouldn’t 
believe  how  often  the  voice  folks  assume 
VoIP  security  is  the  responsibility  of  the 
security  folks,  while  the  security  team 
assumes  the  opposite.  If  it’s  the  least  bit 
unclear  who’s  responsible,  sort  it  out 
right  away. 


The  next  step:  Assess  your  vulnerabili¬ 
ties  and  concerns.  Corporate  VoIP  threats 
fall  into  four  main  categories:  availability, 
privacy,  theft  of  service  and  gaining 
access  to  sensitive  information.  Avail¬ 
ability  refers  to  vulnerability  to  distrib¬ 
uted  DoS  or  other  attacks  that  can  take 
the  VoIP  system  offline.  Privacy  has  to  do 
with  the  ability  to  tap  into  VoIP  calls.Theft 
of  service,  of  course,  has  to  do  with  a  sys¬ 
tem’s  vulnerability  to  abuse,  such  as  the 
FoIP  scam  noted  above.  And  on  the  last 
issue,  consider  the  corporate  version  of 
vishing:  A  hacker  modifies  the  caller  ID 
portion  of  a  VoIP  call  to  read  “IT 
Department,”  then  calls  Mr.  Bigshot’s  sec¬ 
retary  and  asks  for  Mr.  Bigshot’s  pass¬ 
words  under  some  pretext  or  other.  The 
secretary,  believing  she’s  speaking  to  the 
IT  department,  readily  complies  with  the 
hacker’s  request. 

Finally,  address  each  threat  specifically. 
To  ensure  availability,  make  sure  general 
distributed  DoS  protections  are  in  place 
and  use  IP  PBXs  based  on  hardened  oper¬ 
ating  systems.  To  ensure  privacy,  use 
appropriate  encryption.  Protecting  against 
theft  of  service  or  the  release  of  sensitive 
information  requires  training  and  accu¬ 
rate  call  monitoring. 

The  bottom  line?  VoIP  security  threats 
are  here  today  —  but  so  are  the  tools  and 
techniques  for  combating  them. 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 
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VoIP  event 

Where  will  "convergence  2.0"  take  the  enterprise 
next?  Attend  the  Network  World  IT  Roadmap  event 
coming  to  Dallas.  One  day  Seven  tracks.  And  40  IT 
all-stars,  analysts,  vendors  and  user  case  studies 
ready  to  work  for  you. 

www.nwdocfindor.eoin/4129 
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Salesforce.com  connects  with  SAP 


■  Nuance  Communications  says 
the  latest  version  of  its  speech- 
recognition  software  can  achieve 
99%  accuracy  with  some  speakers, 
without  a  training  session  to  familiar¬ 
ize  the  software  with  how  that  per¬ 
son  talks  Dragon  Naturally- 
Speaking  9  lets  users  control  many 
applications  on  Windows  PCs  and  dic¬ 
tate  documents.  It's  designed  for 
those  who  have  to  type  frequently, 
and  disabled  people.  The  percentage 
of  words  it  spells  correctly  varies 
depending  on  sound  quality  and  how 

a  person  talks,  Nuance  says.  Nuance 
has  most  of  the  market  for  dictation 
software,  except  for  specialized  areas 
such  as  medicine,  says  Bill  Meisel, 
president  of  TMA  Associates.  Voice 
recognition  for  controlling  applica¬ 
tions  is  attracting  interest  from  com¬ 
panies  including  Google  and  Micro¬ 
soft.  Microsoft  includes  some  voice- 
recognition  capability  in  Windows. 
NaturallySpeaking  9  is  available.  The 
Standard  version  costs  $99,  and  the 
Preferred  version,  with  support  for 
more  applications  and  for  converting 
digital  voice-recorder  tracks  into  text, 
costs  $199.  Specialized  versions  for 
the  legal  profession  and  medical  spe¬ 
cialties  cost  $1,199  each. 

■  StrataVia  has  announced  soft¬ 
ware  it  says  automates  database 
administration  tasks,  helping  to  re¬ 
duce  costs  and  free  administrators  to 
do  other  work.  Called  Data  Palette, 
the  software  lets  companies  create 
flows  of  automated  administrative 
tasks,  such  as  backing  up  data,  which 
can  be  performed  across  mixed  envi¬ 
ronments,  including  databases  from 
IBM,  Microsoft  and  Oracle,  the  com¬ 
pany  says.  The  software  examines 
databases  and  their  surrounding  envi¬ 
ronment.  If  an  application's  perfor¬ 
mance  drops  below  a  certain  level,  it 
will  locate  the  database  the  applica¬ 
tion  is  running  on,  identify  users  doing 
nonessential  work  and  warn  them  via 
e-mail  that  they're  going  to  be  cut  off. 

1  will  then  disconnect  them  and  send 
eport  to  the  database  administra¬ 
tor.  Data  Palette  is  available  for 
$6,000  per  database. 


BY  CHINA  MARTENS,  IDG  NEWS  SERVICE 

Salesforce.com  last  week  unveiled  the 
20th  generation  of  its  hosted  CRM  software 
and  announced  a  connector  integrating  its 
CRM  software-as-a-service  with  SAP’s  R/3 
ERP  applications. 

Salesforce.com  in  June  announced  new 
features  of  Summer  ’06,  notably  a  version 
aimed  at  partners  that  combines  CRM  and 
partner  relationship  management  features. 

The  Summer  ’06  package  integrates  the 
company’s  CRM  product  with  interactive 
call  scripting  to  improve  the  performance 
of  sales,  marketing  and  service  staff.The  call 
scripts,  built  on  an  Asynchronous  Java¬ 
Script  +  XML  interface,  are  easy  to  navigate 
and  can  be  revised  in  real  time.  With  them, 
staff  keeps  a  running  tally  of  how  prospects 
respond  to  questions,  so  they  can  identify 
sales  leads  more  easily  the  company  says. 

Summer  ’06  includes  lead-history  track¬ 
ing  to  assist  in  sales-call  compliance  and 
auditing.  With  it,  managers  have  a  better 


Microsoft  introduces  a  way  for  users  to 
protect  some  of  their  files  and  corporate 
America  goes  crazy  —  crazy  mad.  In  an  era 
when  laptops  full  of  corporate  and  person¬ 
al  secrets  are  stolen  on  a  daily  basis,  you 
would  think  this  sort  of  security  offering 
would  be  welcomed,  but  that  seems  not  to 
be  the  case.  It  took  Microsoft  only  a  week  to 
get  the  message  and  remove  the  applica¬ 
tion  from  its  download  area. 

At  first  it  seemed  like  a  good  idea:  provide 
a  private  folder  where  a  user  could  put  files 
that  would  be  encrypted  and  password- 
protected  —  just  the  thing  for  parents  who 
want  to  hide  the  family  finances  (or  grown¬ 
up  content)  on  the  family  computer,  or  by 
anyone  with  a  laptop  to  reduce  the  risk 
when  it  gets  stolen.  (Note  I  said  “when,”  not 
“if.”  For  security  planning,  you  must  assume 
they  will  be  stolen  and  make  sure  important 
data  will  not  be  compromised  when  they 
are  (see  www.nwdocfinder.com/4432.) 

What  is  wrong  with  Private  Folder?  Within 
a  few  hours  after  the  program  was  made 


sense  of  how  sales  staff  turn  leads  into  cus¬ 
tomers  and  have  a  complete  audit  trail  of  a 
customer  interaction. 

Salesforce  Connector  for  SAP  R/3  is  set  to 
be  released  at  the  end  of  this  month.  It  will 
be  available  on  request  as  a  free  option  for 
the  Unlimited  Edition  of  the  vendor’s  CRM 
software  and  will  cost  Enterprise  Edition 
customers  $12,000  per  year. 

Connector  lets  users  integrate  Sales- 
force.com  CRM  applications  with  SAP’s  R/3 
ERP  software  to  view  customer  data  from 
both  products  in  one  place.  It  also  supports 
bidirectional  synchronization  of  informa¬ 
tion  between  Salesforce.com  and  R/3. 

“A  few  years  ago,  integration  was  said  to 
be  the  Achilles’  heel  of  on-demand  soft¬ 
ware,”  says  Kendall  Collins,  vice  president  of 
product  marketing  at  Salesforce.com. “That 
has  not  been  the  case,”  because  Sales- 
force.com  partners  have  built  connectors 
between  the  vendor’s  CRM  offerings  and 
third-party  products,  he  adds. 


available,  complaints  began  to  show  up  on 
Microsoft-related  blogs.  All  the  comments  I 
saw  concerned  the  impact  of  Private  Folder 
in  corporations. 

These  comments  fell  into  two  categories: 
First, worry  about  giving  employees  the  abil¬ 
ity  to  hide  files  from  their  bosses;  one  can 
imagine  all  sorts  of  things  an  employee 
might  want  to  hide,  from  purloined  copies 
of  the  corporate  family  jewels  to  love  letters 
to  a  co-worker.Second, worry  about  dealing 
with  forgotten  passwords:  From  experience, 
one  of  the  biggest  corporate  support  prob¬ 
lems  is  some  people’s  ability  to  forget  their 
passwords  over  a  long  weekend.  In  addi¬ 
tion,  employees  could  encrypt  important 
files,  then  be  fired  or  hit  by  a  truck  —  leav¬ 
ing  the  IT  department  without  a  way  to 
recover  the  files. 

Apple  has  had  an  equivalent  function  for 
a  while  —  FileVault,  in  OS  X  —  with  few 
complaints.  1  expect  most  of  the  lack  of 
complaint  comes  from  the  fact  there  is  so 
little  penetration  of  Macs  in  corporate 
America,  but  in  addition,  the  way  the  appli¬ 
cation  is  designed  lends  it  better  to  cen¬ 
tralized  IT  management.  FileVault  has  a 
master  password  that  can  be  set  by  the  IT 
group  and  used  to  unlock  FileVaults  on 
individual  computers. 


To  create  Connector,  Salesforce.com 
worked  closely  with  partner  Sierra  Atlantic, 
Collins  says. They  linked  the  CRM  software 
to  R/3  through  SAP’s  Java  Connector  tool 
kit  to  its  Intermediate  Document  data  con¬ 
tainer,  which  lets  an  SAP  and  a  non-SAP  sys¬ 
tems  exchange  data. 

Salesforce.com  decided  to  offer  a  con¬ 
nector  to  SAP’s  older  R/3  technology  not  its 
more  recent  mySAP  offerings,  because  the 
“overwhelming  majority  of  our  customers 
are  using  R/3  [Release]  4.6C,”  Collins  said. 

He  wouldn’t  comment  on  future  connec¬ 
tors  Salesforce.com  might  offer. The  vendor 
plans  to  weigh  the  integration  capabilities 
its  partners  have  built  and  offer  via  its 
AppExchange  network. 

Oracle,  the  other  leading  ERP  vendor,  also 
has  hosted  CRM  products.  Microsoft  has 
announced  it  will  offer  a  hosted  version  of 
its  Dynamics  CRM  software  in  2007.  Sales- 
force.com  also  competes  with  other  hosted 
applications  vendors,  such  as  NetSuite.B 


It  seems  to  me  the  issue  with  Microsoft’s 
technology  is  more  than  a  bit  overhyped. 
Users  have  been  able  to  password-protect 
or  encrypt  files  on  Windows  machines  for 
years.  Applications  exist  such  as  WinZip  and 
Microsoft’s  own  file-  and  folder-encryption 
function  for  Windows  XP  (see 
www.nwdocfinder.com/4433). 

I’m  not  sure  why  Private  Folder  created 
such  a  stir  —  maybe  because  it  was  so 
easy  to  use,  and  because  the  pundits  did 
not  have  much  else  to  talk  about  that 
week.  It  is  a  shame  this  function  is  now 
lost  to  users  who  badly  need  something 
like  this,  but  Microsoft’s  loss  is  its  competi¬ 
tors’  gain:There  are  a  bunch  of  companies 
ready  to  sell  you  file-,  folder-  or  whole-disk 
encryption  applications.  If  you  keep  confi¬ 
dential  information  on  your  laptop,  and 
you  do  not  have  a  Mac,  look  into  them. 

Disclaimer:  Harvard  has  the  same  opera¬ 
tions  issues  as  any  other  $2  billion-per- 
year  business,  but  has  no  opinion  on  how 
you  should  protect  your  data  (unless  it’s 
Harvard  data). 

Bradner  is  a  consultant  with  Harvard 
University's  University  Information  Sys¬ 
tems.  He  can  be  reached  at  sob 
@sobco.com. 


Missed  chance  for  privacy 


The  cost 
of  getting 

bigger 
just  got 
smaller. 

You  need  more  storage.  You  don't  need  more  fees  or  systems  to 
manage.  The  Pillar  Axiom™  storage  system  lets  you  add  performance 
and  capacity  over  300  TB  per  system,  without  multiple  software 
license  fees.  It  empowers  you  to  manage  data  on  multiple  tiers, 
whether  in  SAN,  NAS  or  both,  through  one  simple  user  interface. 
Because  Pillar  delivers  top-tier  performance  and  capacity,  often  for 
less  than  what  many  companies  pay  just  to  maintain  and  operate 
their  storage  systems,  it  can  really  improve  your  bottom  line. 

To  hear  about  our  new  approach  to  managing  data  storage,  you 
owe  it  to  yourself  to  schedule  a  half-hour  briefing. 

Call  1-877-252-3706  orvisitwww.pillardata.com/smaller 

Learn  the  truth  about  networked  storage. 
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Lloyd  Gauntlett  Hession,  Chief  Security  Officer, 

BT  Radianz,  Inc. 

Mark  Moroses,  Senior  Director,  Technical  Services 
&  Security  Officer,  Maimonides  Medical  Center 
Douglas  Smith,  Senior  Vice  President  and  Corporate 
Information  Security  and  Business  Continuity 
Executive,  Bank  of  America 
John  N.  Stewart,  Vice  President  &  Chief  Security 
Officer,  Corporate  Security  Programs  Organization, 
Cisco  Systems 

Jay  White,  Global  Information  Protection  Architect, 
Chevron 


Here’s  just  a  small  sample  of  the 
speakers  you’ll  meet: 


on  2,700,000  Customers 


Join  us  for  two  days  this  September  to  ensure 
your  company  stays  off  the  front  page. 


The  premier  enterprise  security  summit  designed  to  address  the  converging 
business  and  technology  challenges  facing  CIOs,  CSOs  and  IT  Leaders. 

Brought  to  you  by  IDG,  the  publisher  of  C/O,  Computerworld,  CSO,  InfoWorld 
and  Network  World,  The  Security  Standard  is  the  first  and  only  forum  to 
bring  together  the  visionaries  and  the  views  to  help  you  leverage  security  as  a 
competitive  advantage.  You’ll  listen  to  key  stakeholders  from  within  and  outside 
the  organization  as  they  debate  the  most  pressing  cultural,  political,  business  and 
technical  challenges  facing  security  professionals  today, 

II 


n  sec 


up 


Identify  Effective  Risk  Management  Strategies 
Choose  the  Right  Technology  Strategies 
Understand  How  Security  Influences  the  Business 
Explore  Perceptions  Beyond  the  Organization 
Evaluate  the  New  Threat  Landscape 


Register  before  July  28th,  and  you’ll  save  $400  off 
the  regular  rate  of  $1,295. 

Visit  www.thesecuritystandard.net/NWA2  or  call 


...  and  many  more  top  security  specialists  and 
business  experts. 
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TECHNOLOGY  UPDATE 


■  AN  INSIDE  LOOK  AT  TECHNOLOGIES  AND  STANDARDS 


PCI  Express  gains  I/O  virtualization 


HOW  IT  WORKS:  I/O  VIRTUALIZATION 

Adding  I/O  virtualization  (IOV)  to  PCI  Express  enables  the  optimization  of  I/O 
resources  (endpoints)  to  match  CPU  needs  in  bladed  systems,  minimizing 
space,  power  and  cost. 


Processor  blade  1 


Processor  1 

Operating 
system  A 

Processor  2 

Operating 
system  B 

Multiroot 

PCIe 


Processor  blade  “N” 


Processor  1 

Operating 
system  A 

Processor  2 

Operating 
system  B 

frumnnnnJ^ 

Multiroot  PCIe  switch 


To  achieve  IOV,  a  multi- 
root  aware  switch  and 


Endpoint  1 
(Example:  10G 
Ethernet) 


Endpoint  2 
(Example:  Fibre 
Channel) 


Endpoint  3 
(Example: 
storage) 


endpoints  must  be  in 
place  to  create  virtual 
hierarchies  letting 
multiple  operating 
systems  share  common 
endpoints. 


yV 


Multiroot  IOV  components  enable 
the  tailoring  of  I/O  resources  to 
match  the  application  needs  of 
various  operating  systems  running 
on  multiple  processor  blades. 


_ A _ 

The  ability  to  run  multiple 
operating  systems  on  a  single 
blade  drives  the  need  for  end¬ 
point  sharing. 


BY  ZACK  MIHALIS 

The  PCI  Express  bus  has  emerged  as  an 
efficient  and  cost-effective  platform  for  net¬ 
work  applications.  Created  to  address  the 
performance,  scalability  and  configuration 
limitations  of  older  parallel  computer  bus 
architectures,  this  general-purpose  serial 
I/O  interconnect  has  been  widely  adopted 
in  enterprise,  desktop,  mobile,  communica¬ 
tions  and  embedded  applications. 

Despite  its  widespread  deployment,  how¬ 
ever,  there  is  a  common  perception  that  the 
bus  cannot  meet  the  unique  I/O  demands 
of  high-performance  storage  and  network¬ 
ing.  New  work  on  extensions  to  the  PCIe 
standard  is  revising  that  notion.The  PCI-SIG 
Working  Group  is  developing  a  specifica¬ 
tion  that  adds  I/O  virtualization  capability 
to  PCIe.  This  functionality  lets  network 
administrators  virtualize  or  share  peripher¬ 
als  and  endpoints  across  different  CPUs  or 
CPU  complexes. 

Base  PCIe  topologies  have  dedicated 
endpoints  mapped  to  specific  root  com¬ 
plexes.  In  this  environment,  each  physical 
endpoint  in  the  network  is  associated  with 
one  system  image  and  cannot  be  shared. 

In  the  new  specification,  root  complex 
topologies  provide  two  levels  of  I/O  virtual¬ 
ization.  In  the  first  level,  called  single-root 
I/O  virtualization  (IOV),  the  virtualization 
capability  is  provided  by  the  physical  end¬ 
point  itself.  The  endpoint  supports  one  or 
more  virtual  endpoints,  and  mechanisms 
are  used  to  enable  each  virtual  endpoint  to 
directly  sink  I/O  and  memory  operations 
from  various  system  images,  and  source 
direct  memory  access,  completion  and 
interrupt  operations  to  a  system  image 


without  run-time  intervention. 

In  the  second  level,  called  multiroot  IOV 
the  virtualization  capability  is  extended  by 
the  use  of  a  multiroot  switch  and  a  multi¬ 
root  endpoint.  These  switches  and  end¬ 
points  have  mechanisms  to  let  multiple 
root  complexes  and  system  images  share 
common  endpoints. 

I/O  virtualization  has  a  number  of  bene¬ 
fits.  First,  it  can  be  used  to  improve  system 
use.  While  each  virtual  system  requires  its 
own  dedicated  I/O  resources,  in  many  phys¬ 


ical  configurations  the  number  of  I/O  slots 
available  on  a  client  or  servers  may  be 
insufficient  to  provide  each  virtual  system 
with  its  own  dedicated  I/O  endpoint.  Even 
when  an  adequate  number  of  physical  I/O 
endpoints  is  available,  this  topology  lets  vir¬ 
tual  systems  share  underused  endpoints. 

Moreover,  the  use  of  a  centrally  managed 
I/O  resource  improves  the  scalability  of  I/O 
while  simplifying  the  management  of  the 
network.  Both  blade  and  rack-mount 
servers  can  access  the  resources  they  need, 


when  they  need  them.  And,  because  I/O 
can  be  managed  from  a  centralized  switch, 
administrators  can  allocate  resources  more 
easily  and  efficiently 

The  centralized  approach  to  I/O  virtual¬ 
ization  also  offers  network  administrators  a 
new  opportunity  to  maximize  network  I/O 
load  balancing  and  bandwidth  manage¬ 
ment.  If  a  virtual  system  needs  additional 
bandwidth,  for  example,  network  managers 
can  allocate  more  physical  endpoint 
capacity  And  if  a  virtual  system  consumes 
more  I/O  resources  than  necessary  its  con¬ 
sumption  can  be  reduced  to  a  preset  level. 

Finally  I/O  virtualization  promises  to  pay 
dividends  in  higher  network  reliability  By 
eliminating  redundancy  in  peripherals  and 
ports  across  the  network  infrastructure  and 
reducing  the  number  of  components  in  the 
network,  failure  rates  will  drop.  And 
because  network  administrators  can  better 
match  I/O  resources  to  performance  needs 
and  thereby  use  fewer  cards,  cables  and 
ports,  I/O  virtualization  also  promises  to 
dramatically  reduce  network  costs. 

Many  in  the  server  and  storage  industry 
have  viewed  PCIe  as  a  bridging  or  transi¬ 
tional  technology  The  addition  of  I/O  virtu¬ 
alization  capabilities  to  PCIe  will  alter  those 
views.  By  combining  this  new  ability  to 
share  peripherals  and  endpoints  across 
multi-CPU  configuration  with  the  intrinsic 
cost  benefits  of  the  bus’s  extensive  installed 
base  and  supporting  ecosystem,  PCIe  is  an 
attractive  option. 

Mihalis  is  a  director  at  IDT  (Integrated 
Device  Technology).  He  can  be  reached  at 
zack.  mihalis@idt.  com. 


Where  can  I  find  scriptable  command  line  tools 
that  can  combine  multiple  QuickTime  movie 
segments? 

The  QTCoffee  package,  available  at  www.3am.pair 
.com,  provides  Macintosh  software  for  manipulating 
QuickTime  files  from  the  command  line  and  includes  a 
tool  named  catmovie  that  can  be  used  to  combine 
movie  segments.  Catmovie  can  be  used  to  create 
pointer  movies  that  refer  to  original  files,  or  it  can  be 
used  with  the  self-contained  command  option  to  create 


self-contained  movies  by  combining  original  files. 

Four  other  command  line  utilities  are  included  in 
QTCoffee:  muxmovie,  modmovie,  chapcutmovie  and 
splitmovie.  Together  these  utilities  provide  scriptable 
command  line  capabilities  for  taking  apart  QuickTime- 
readable  files  and  putting  them  back  together  in  a  vari¬ 
ety  of  combinations.  Muxmovie  can  be  used  for  simulta¬ 
neously  playing  multiple  tracks.  Modmovie  can  extract 
tracks,  rescale  the  movie  and  extract  chapters.  Chap¬ 
cutmovie  and  splitmovie  are  used  for  cutting  movies  into 
chapters  or  by  time,  or  into  movies  of  equal  duration. 


Good  documentation  is  provided,  which  makes  it  rela¬ 
tively  easy  to  sort  out  which  command  line  options  are 
needed  for  a  particular  task.  Two  other  Mac  OS  utilities 
provided  by  the  same  Web  site,  iTunesJoin  and  Movie 
Sync,  also  are  quite  useful  for  manipulating  QuickTime 
media.  iTunesJoin  is  used  to  combine  iTunes  tracks,  and 
Movie  Sync  synchronizes  audio  and  video  tracks  that 
have  drifted  out  of  sync  during  the  length  of  a  movie. 

Blass ,  a  network  architect  at  Change@Work  in  Houston, 
can  be  reached  at  dr.internet@changeatwork.com. 
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Cruzer  U3  delivers  the 


SanDisk 

For  less  expensive  or  simply  more 
utilitarian  products,  packaging  has 
become  far  more  generic  and  func¬ 
tional.  With  products  such  as  this 
week’s  object  of  desire,  the  SanDisk 
Cruzer  U3  Flash  Drive,  the  packag¬ 
ing  is  a  standard  blister  pack. 

We  couldn’t  find  our  scissors,  so 
we  grabbed  the  nearest  implement 
of  destruction:  a  pair  of  pliers.  Did 
those  open  the  packaging?  Of 
course,  not.  We  just  wound  up  with 
a  twisted  piece  of  plastic,  so  we 

headed  for  The  Lab. 

The  Lab  is  actually  a  garage,  but  we  call  it  The  Lab  for  a 
good  reason:  Our  good  friend  Bob  C.  pointed  out  some 
time  ago  that  if  you  call  it  the  garage, your  wife  will  put  junk 
in  it.  He  calls  his  The  Workshop,  and  his  wife  has  so  far  left 
it  alone.  We  now  call  ours  The  Lab  because  we  think  it 
sounds  even  more  like  a  place  that  wives  should  not  mess 
with.  So  far,  the  ruse  has  worked. 

The  first  cutting  tool  we  found  in  The  Lab  was  a  Stanley 
knife,  so  we  impatiently  slashed  off  the  edges  of  the  blister 
pack  and  voila!  The  SanDisk  Cruzer  U3  Flash  Drive  was  in 
our  hands,  and  we  discovered  that  plastic  cut  with  a  Stan¬ 
ley  knife  can  be  rather  sharp. 

As  avid  and  committed  readers  of  this  column  will  recall, 
we  discussed  U3  technology  some  weeks  ago  (www.nw 
docfinder.com/4434). The  U3  Flash  Drives  provide  embed¬ 


ded  encryption  services  that  make  them  a  secure  and 
robust  way  to  make  your  data  and  applications  portable. 

While  the  blister-pack  packaging  may  be  utilitarian,  the 
SanDisk  Cruzer  U3  products  are  polished  and  elegant. The 
$129  2GB  Titanium  model  has  a  thumb  slide  that  pops  out 
the  hidden  USB  connector — a  nice  detail  —  and  the  slide 
glows  blue  when  the  drive  is  being  accessed. 

The  drives  use  the  latest  version  of  the  U3  Launcher 

SanDisk  Cruzer  U3  products 
are  polished  and  elegant. 

Platform,  and  there’s  a  noticeable  performance  improve¬ 
ment  and  a  slicker  user  interface. 

Beyond  the  basics  the  SanDisk  U3  products  come  with 
some  very  useful  preinstalled  applications.  First  up  is  a  U3 
version  of  SignupShield,  a  password  manager  that  appears 
to  be  similar  to  Siber  Systems  Pass2Go,  a  U3  version  of  the 
company’s  AI  Roboform  product.  We  wrote  about  Robo- 
form  just  over  a  year  ago  (www.nwdocfinder.com/4435), 
and  from  what  we  can  see  the  products  are  close  in  fea¬ 
tures.  Note  that  Signup  Shield, like  Pass2Go,is  not  really  free, 
because  after  the  trial  period  the  unlicensed  version  lets 
you  use  only  10  logons. 

The  U3  drive  includes  Avast  Antivirus, also  unknown  to  us, 
which  is  free  for  “home  users  who  do  not  use  their  com¬ 
puter  for  profit.”  Any  input  you  might  have  on  SignupShield 
or  Avast  Antivirus  would  be  welcome. 


goods 

Also  on  the  SanDisk  drive  is  the  free  U3  version  of  the 
Skype  VoIP  client  (Version  2.0.14.85),  which  works  as 
well  as  the  regular  PC  version.  It  is  available  only  from 
the  U3  site  and  oddly  isn’t  mentioned  on  the  Skype  Web 
site  except  in  one  press  release. 

Finally  there  is  SanDisk’s  own  CruzerSync  U3  Edition. 
This  is  a  fully  functional  version  of  the  utility  and,  if  you 
are  an  Outlook  user,  this  program  is  so  good  that  even 
without  any  other  software  on  the  drive,  CruzerSync 
alone  justifies  its  purchase. 

CruzerSync  can  manually  or  automatically  synchro¬ 
nize  any  or  all  data  to  and  or  from  a  host  PC,  including 
e-mail,  calendars,  contacts,  notes  and  so  on,  from  either 
Outlook  or  Outlook  Express.  (SanDisk’s  CruzerSync 
FAQ  seems  to  be  curiously  out  of  sync  with  the  actual 
software  on  the  topic  of  whether  Outlook  Express  is 
supported.) 

CruzerSync  also  synchronizes  your  browser  favorites 
from  Internet  Explorer  or  Firefox.  It  can  launch  Secure 
Browsing  for  Explorer  that  removes  all  of  the  temporary 
files  created  during  a  browsing  session,  so  the  guys  in 
the  black  helicopters  will  have  no  idea  what  you’ve  been 
looking  at. 

Bottom  line:  We  really  like  the  Cruzer  Titanium  and  the 
CruzerSync  software.  Now  we  need  to  find  some  ban- 
dages.That  blister-pack  plastic  was  really  sharp. 

Transfuse  your  thoughts  to  gearhead@gibbs.com  or  on 
Gibbsblog. 


GEARHEAD 


INSIDE  THE 
NETWORK 
MACHINE 

Mark  Gibbs 


GoolTools 

Quick  takes  on  high-tech  toys.  Keith  Shaw 


I  took  my  own  advice  and  took  a  vacation  last  week  (see  www.nw 
docfinder.com/4431),  so  instead  of  quick  reviews  of  tech  products 
this  week,  here’s  some  new  stuff  coming  down  the  pike: 


Acer  launches  new  multimedia  notebooks 

1  can’t  wait  to  try  one  of  Acer’s  new  Aspire  5100  notebooks,  which  include  AMD 
Turion  64  x2  processors  and  the  latest  performance  and  multimedia  features.  The 
notebooks  start  at  $899,  and  include  hard  disk  drives  up  to  160GB, a  DVD  super-multi 
double-layer  drive  (as  well  as  an  HD-DVD  drive  based  on  availability),  a  five-in-one 
media  card  reader  and  a  15.4-inch  widescreen  display  Included  is  an  ATI  Radeon 
Xpress  1 100  graphics  card  with  as  much  as  512MB  of  video  memory  (128MB  dedi¬ 
cated  VRAM  and  up  to  384MB  of  shared  memory), integrated  wireless  LAN, a  Gigabit 
Ethernet  port  and  optional  Bluetooth  2.0  connectivity. 

In  addition,  Acer  says  its  QuicCharge  technology  aims  to  improve  battery  life  and 

shortens  the  recharge  time  by  charging  the  battery 
to  80%  within  one  hour. 


Put  a  GreenBorder  around  your  browser 

I’m  fascinated  by  the  idea  behind  GreenBorder  Tech¬ 
nologies’  GreenBorder  Pro  software,  which  aims  to 
keep  Internet  surfers  safe  from  Web-based  threats.  The 
software  prevents  malicious  code  found  online  or  em¬ 
bedded  in  downloaded  content  from  installing  on  a  PC, 
GreenBordersays.lt  does  this  by  keeping  files  and  system 
resources  invisible  to  malware,  and  prevents  files  from 
being  remotely  accessed,  modified  or  controlled. 

The  software  creates  a  virtual  privacy  zone  in  which 
downloaded  applications  are  placed,  and  a  green  border 


Acer’s  Aspire  5100  note¬ 
book  includes  the  latest 
multimedia  features. 


is  placed  around  the  user’s  browser.  Any  file  downloaded  with  GreenBorder  is  placed 
in  this  zone,  and  the  file  is  deleted  when  a  user  ends  a  session  (trusted  downloaded 
files  can  be  unsecured  and  saved  to  the  PC).  Files  or  programs  that  have  been  down¬ 
loaded  —  including  opening  and  editing  Word,  Excel,  PowerPoint  and  other  appli¬ 
cations  —  can  open  or  run  in  this  environment,  even  if  those  files  have  exploits  in 
them.  GreenBorder  says  the  software  also  aims  to  protect  information  from  identity 
thieves  by  securing  data  that  users  enter  online  while  they  shop  or  bank. 

The  software  (for  Windows  XP  and  2000  systems)  is  available  for  $50  per  year,  but 
the  first  10,000  people  who  download  from  GreenBorder’s  Web  site  before  Sept.  1 
can  get  a  free  one-year  license. 


Sony  shrinks  the  USB  drive 

I  know  everything  in  the  tech  world  tends  to  get  increasingly  smaller,  and  now  the 
USB  flash  drive  is  no  exception.  Sony  Electronics  says  it  is  shipping  its  Micro  Vault 
Tiny  drive,  which  measures  about  0.5  inches  wide  by  1 
inch  long,  with  storage  capacities  that  range  from  256M 
to  4GB  (capacities  will  be  color  coded;  everyone 
will  want  the  purple  one,  which  is  the  4GB  ver¬ 
sion).  Prices  will  range  from  $30  to  $200, 
depending  on  capacity 

Sony  says  the  devices  will  come  with  a  clip-on 
carrying  case  that  can  be  attached  to  a  cell  phone  case, 
key  chain  or  clipped  onto  a  notebook.  Software  called 
Virtual  Expander  will  let  users  virtually  store  three  times  as 
much  data  through  automatic  compression  and  decom¬ 
pression,  Sony  says. 

Shaw  can  be  reached  at  kshaw@nww.com.  The  Cool 
Tools  Empire  includes  the  weekly  video  show  (www.  ^  ,  Micro  Vault  is 
networkworld.com/video]  and  the  Twisted  Ftiir  prxicast  on|y -g  jncf,  |ong  an(j  5 
(www.networkworld.com/weblogs/twistedpair/).  inches  wide. 
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HIGH  AVAILABILITY  & 
RELIABILITY 


SUPERIOR  PERFORMANCE 

•  Up  to  1 40,000  L4  connections/sec 

•  Application  throughput  from  2  to  1 2  Gbps 

•  Wire-speed  Layer  2/3  forwarding 
■  Scalable  processor  performance 


Resilient  switching  and  routing  foundation 
Global  load  balancing  for  multi-site 
scalability  and  survivability 
Link  aggregation 

Rapid  and  stateful  session  failover 
RSTP,  VRRP  for  switch  and  router 
redundancy 

Redundant  power  supplies 


SCALABILITY  & 
EXPANDABILITY 

•  Port  expansion  to: 

•  48  Gigabit  Ethernet 

•  48  10/100  Mbps  Ethernet 

•  4  1 0-Gigabit  Ethernet 


serverIrongt  e-series 


SECURITY 

•  DoS  protection  up  to  4  million  SYN/sec 
■  Wire-speed  ACLs 

•  Application  rate  limiting 

•  Secure  device  management 

•  sFlow  traffic  monitoring 


FLEXIBILITY  Sc 
MANAGEABILITY 


RICH  FEATURES 

■  Intelligent  content  switching  using 
URL,  HTTP,  XML,  cookies,  SSL 
ID  and  others 

•  IP  NAT 

•  RIPv2,  OSPF  routing 


In-line,  one-ARM  and  Direct  Server 
Return  modes 

Web,  SNMP,  INM  and  Cisco-like  CLI 
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Uptime,  scalability,  performance 
and  security  are  the  watchwords 
for  your  network.The  Serverlron® 
application  switch  is  designed  for 
this  environment.  Its  advanced 
switch-based  architecture 
features  a  scalable  content 
switching  engine  with  hardware- 
based  DoS  protection  delivering 
the  industry’s  most  powerful 
and  secure  application 
switching  solution. 
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Appliances  Cannot  Match  thg 

\ 

Power  and  Flexibility  ot  the  38/ VeHroii 

ServerIrdn  PC  Appliances 

PERFORMANCE  UPGRADEABILITY 

X 

IN-SERVICE  PORT  EXPANDABILITY 

X 

lO-GE  SUPPORT,  >1D  GPBS  THROUGHPUT 

s/ 

X 

HIGH-DENSITY  DIRECT  SERVER  FAN-OUT 

\/ 

X 

HARDWARE-BASED  CONNECTION 

MANAGEMENT  AND  DOS  PROTECTION 

s/ 

X 

WIRE-SPEED  L2/L3  FORWARDING  AND  ACLS 

s/ 

X 

FOUNDRY 

NETWORKS 

The  Power  of  Performance™ 


The  ServerIrdn 
Family  of  products 
Also  Includes: 


Server l ron  450  and  850 


SERVERlRONXL 


Foundry  Networks,  Inc.  is  a  leading  provider  of  high-performance  Enterprise  and  Service  Provider  switching,  routing  and  Web  traffic  management  solutions 
including  Layer  2/3  LAN  switches,  Layer  3  Backbone  switches,  Layer  4-7  Web  switches,  wireless  LAN  and  access  points,  access  routers  and  Metro  routers. 


FOR  MORE  INFORMATION  PLEASE  CALL:  US/CANADA  1  BBS  TURBOLAN, 
INTERNATIONAL  +1  408.586.1700  OR  VISIT  OUR  WEBSITE  AT  WWW.FOUNDRYNET.COM/SIE 
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Tit  for  tat  in 
convergence  war 

Microsoft  last  week  climbed  into  bed  with  Cisco’s 
largest  competitor,  Nortel,  as  it  continues  to  battle 
Cisco  for  dominance  in  the  emerging  unified- 
communications  market. 

In  a  multifaceted  deal,  Microsoft  and  Nortel  formed  the 
Innovative  Communications  Alliance  and  committed  to 
develop  and  sell  unified  communications  products  jointly 
Although  details  were  light,  the  companies  said  the  four-year 
agreement  calls  for  cross-licensing  technology  and  forming  a 
Nortel  systems  integration  division  to  support  the  partnership. 

Early  development  efforts  will  focus  on  integrating  Nortel’s 
VoIP  products  with  Microsoft’s  client  software.  Nortel  CEO 
Mike  Zafirovski  says  he  expects  the  deal  will  let  Nortel  gener¬ 
ate  $1  billion  in  new  revenue  through  2009. 

Microsoft’s  battle  with  Cisco  has  been  becoming  progres¬ 
sively  more  pronounced.  Last  March  Cisco  put  the  compa¬ 
nies  on  a  collision  course  when  it  announced  the  Unified 
Presence  Server  and  Unified  Personal  Communicator  client 
software,  which  are  analogous  to  Microsoft  Live 
Communication  Server  and  the  Microsoft  Office 
Communicator  client.  Cisco  also  released  CallManager  5.0  — 
the  heart  and  soul  of  the  company’s  key  VoIP  product  —  and 
offered  it  on  Linux.This  is  the  first  time  CallManager  has 
been  available  on  anything  but  Windows. 

In  addition,  just  last  month  Microsoft  announced  a  broad 
unified-communications  strategy  that  hinted  at  IP  PBX  fea¬ 
tures  Microsoft  needs  a  telephone  partner,  however,  and  it  did¬ 
n’t  have  to  look  far  to  find  a  suitable  alternative  to  Cisco. 
Nortel  is  in  desperate  need  of  some  fresh  direction. 

Like  other  VoIP  players,  Nortel  is  looking  to  make  its  IP  PBX 
a  software-only  product;  it  can’t  hurt  to  team  with  Microsoft 
on  that.  Nortel’s  plan  is  to  deliver  telephony  features  as  soft¬ 
ware  modules  that  can  be  used  with  Microsoft’s  unified  com¬ 
munications  software  platform. 

Although  vendor  partnerships  rarely  deliver  what  is 
promised  upfront,  one  reason  to  believe  this  one  will  be  dif¬ 
ferent  is  the  competitive  forces  at  work.  Given  the  increasing¬ 
ly  combative  relationship  between  Microsoft  and  Cisco,  the 
Redmond  giant  has  real  incentive  to  see  this  through. 

Certainly  Nortel  also  has  something  to  gain.This  relation¬ 
ship  is  deeper  than  those  Microsoft  has  with  other  IP  PBX 
vendors  —  which  tend  to  deal  with  product  integration  and 
distribution  —  and  should  be  significant  in  Nortel’s  efforts  to 
expand  its  core  VoIP  business.  Gaining  access  to  all  those 
Microsoft  desktops  will  be  a  huge  win. 

Then  there  is  the  big  “but”:  Regardless  of  motivation  and 
intention,  Microsoft  can’t  get  around  the  fact  that  Cisco  owns 
a  daggering  percentage  of  the  enterprise  infrastructure  mar- 
K'-;  Partnering  with  Cisco  competitors  can  do  only  so  much. 

—  John  Dix 
Editor  in  chief 
jdix@nww.com 


Shortage,  or  short-changed? 

Thanks  to  Linda  Musthaler  for  her  fine  column 
“Skilled-worker  shortage:  fact  or  fiction?”  (www.nw 
docfinder.com/4423).  I  have  been  on  both  sides  of 
the  hiring  relationship  and  can  relate. 

In  the  early  years  of  my  career,  recruiters  pigeon¬ 
holed  me  according  to  product  names  and  version 
numbers  with  which  I  had  direct  experience,  turning 
me  down  for  jobs  involving  slightly  different  mixes 
of  products  that  I  could  have  readily  learned.  Never¬ 
theless,  I  succeeded  in  obtaining  several  fine  jobs, 
which  helped  my  resume. 

Later,  I  started  my  own  computer  consulting  busi¬ 
ness,  which  1  operated  for  20  years.  During  that  time, 
while  sitting  on  the  other  side  of  the  recruiting  desk, 
I  hired  employees  with  less-than-perfect  qualifica¬ 
tions  who  possessed  a  well-rounded  combination  of 
experience,  training,  personality  and  educability 
They  rarely  disappointed  me.  And  after  hiring  them, 
I  permitted  —  even  encouraged  —  them  to  contin¬ 
ue  professional  or  academic  training,  which  only  a 
few  employees  actually  did.  The  few  who  did  were 
allowed  to  work  odd  hours  to  attend  classes.  As  a 
sole  proprietor,  I  had  the  liberty  to  permit  flexible 
schedules  as  long  as  our  client  needs  were  met. 

After  selling  my  business,  I  was  fortunate  to  find  an 
employer  who  apparently  rated  me  the  top  candi¬ 
date  out  of  about  five  dozen  (I  am  told).  My  combi¬ 
nation  of  an  advanced  degree,  industry  certifica¬ 
tions,  experience  with  many  of  the  products  the 
employer  used  and  perhaps  personality  helped 
qualify  me.  In  a  way  I  feel  sorry  for  other  candidates 
whose  qualifications  apparently  were  not  as  close  a 
fit.  No  doubt  many  of  them  who  lacked  experience 
with  one  or  two  specific  products  could  have  readi¬ 
ly  learned  them  and  done  a  fine  job. 

Most  job  openings  are  competitive.  When  dozens 
or  even  hundreds  of  candidates  apply  for  a  single 


job,  employers  can  afford  to  be  choosy  Candidates 
must  do  their  best  to  prepare  in  a  variety  of  ways.  But 
when  only  a  few  qualified  candidates  apply  for  a 
job,  employers  out  of  necessity  become  flexible.  As 
such,  the  process  of  matching  candidates  with  posi¬ 
tions  is  somewhat  self-governing.  Nonetheless,  em¬ 
ployers  might  do  well  to  lessen  their  reliance  on 
resume-scanning  software  that  so  readily  rejects  oth¬ 
erwise  worthy  candidates.  A  less-technological 
approach  to  hiring,  ironically  may  be  better. 

Leslie  Asher 
Network  administrator 
IBEW  Local  Union  1245 
Vacaville,  Calif. 

I  have  been  working  in  IT  for  eight  years  and  have 
continually  heard  about  the  shortage  of  IT  workers. 
Before  Y2K I  believed  it,  but  when  1  began  seeking  a 
job  in  2002  I  realized  reality  was  different  from  what 
I  had  been  reading. 

I’m  an  IT  generalist  with  a  bachelor’s  degree  in  MIS 
and  no  certifications.The  only  jobs  I  get  calls  for  are 
entry  level,  ignoring  the  fact  that  I  have  experience 
managing  an  IT  department  and  significant  supervi¬ 
sory  experience. 

I  wrote  a  paper  on  the  H-l  B  visa  for  a  class  in  social 
issues  and  was  very  enlightened.  At  the  same  time, 
my  company  was  seeking  to  extend  the  visa  of  a  pro¬ 
grammer  from  India.The  CIO  told  the  hiring  manag¬ 
er  to  write  the  job  description  to  match  the  visa 
worker’s  resume  specifically  and  make  sure  the  case 
could  be  made  to  keep  him  regardless  of  the  appli¬ 
cants’  strengths.  These  combined  to  teach  me  the 
realities  of  the  so-called  skills  shortage. 

Dan  Rothbart 
North  Bart,  Fla. 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 1 8  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 
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INFRASTRUCTURE 
INSIGHTS 
Daniel  Minoli 


ABOVE  THE  CLOUD 
James  Kobielus 


Enterprise  architecture  is  not  rocket  science 


Some  areas  of  networking,  such  as  satellite 
communications,  actually  involve  rocket  sci¬ 
ence.  Building  an  enterprise  architecture, 
however,  is  not  rocket  science.  Its  goal  is  to  create 
a  unified  IT  environment  of  standardized  hard¬ 
ware  and  software  systems  across  the  firm,  with 
tight  links  to  the  business  side  of  the  organization. 

Many  companies  have  made  major  IT  invest¬ 
ments  in  recent  years  and  need  to  optimize 
these  assets.  Organizations  with  information¬ 
intensive  operations,  such  as  banks,  brokerage 
firms  and  insurance  companies,  typically  spend 
as  much  as  6%  to  1 0%  of  gross  revenue  on  their 
IT  budgets.  IT  assets  encompass  logical 
resources,  such  as  applications  and  databases,  as 
well  as  physical  resources,  such  as  processors, 
storage  and  networks.  A  firm  optimizes  these 
assets  by  developing  an  enterprise  architecture 
—  a  blueprint  of  its  information  systems  and 
technology  environment. 

With  an  enterprise  architecture,  a  company  cre¬ 
ates  a  map  of  its  IT  assets  and  business  processes, 
and  a  set  of  governing  principles  that  support  the 
business  strategy  and  how  it  can  be  expressed 
through  IT.  The  enterprise  architecture  specifies 
equipment,  protocol  and  interface  standards;  IT 
strategies;  projects  needed  to  bring  about  the 


architecture  and  achieve  the  target  state;  and  a 
development/deployment  plan. 

There  are  many  models  for  developing  an 
enterprise  architecture,  including  the  Open 
Group  Architecture  Framework,  the  Zachman 
Architecture  Framework  and  the  Federal  Enter¬ 
prise  Architecture  Framework.  Most  frameworks 
contain  four  basic  domains:  1)  business  architec¬ 
ture  —  documentation  that  outlines  the  firm’s 

Enterprise  architecture  . . . 
involves  following  proven 
do’s  and  don’ts. 

most  important  business  processes;  2)  informa¬ 
tion  architecture  —  documentation  that  identifies 
where  important  blocks  of  information,  such  as 
customer  records,  are  kept  and  how  to  access 
them;  3)  application  system  architecture  —  a 
map  of  the  software  applications’  relationships  to 
one  another;  and  4)  infrastructure  technology 
architecture  —  a  blueprint  of  the  firm’s  hardware, 
storage  systems  and  networks. 

The  importance  of  having  an  enterprise  archi¬ 
tecture  for  large  operations  is  reinforced  by  the 
Clinger-Cohen  Act  of  1996,  which  authorized  for 


all  federal  agencies  a  CIO  responsible  for  devel¬ 
oping,  maintaining  and  facilitating  a  sound  and 
integrated  IT  architecture. 

But  remember,  enterprise  architecture  is  not 
rocket  science.  It  involves  following  proven  do’s 
and  don’ts,  including: 

•  Have  an  underlying  architecture  framework 
and  a  road  map  for  realizing  your  target. 

•  Have  standards  and  conformance  criteria. 

•  Use  industry-developed  approaches  and 
modeling  tools,  not  homegrown  architecture 
frameworks  and  models. 

•  Hire  and  utilize  the  right  people. 

•  Don’t  spend  years  developing  the  framework 
and  lose  credibility  with  the  firm  about  the 
value  of  enterprise  architecture. 

•  Don’t  be  in  a  situation  where  there  are  no 
mechanisms  for  enforcing  the  architecture 
effectively 

•  Don’t  rubber-stamp  every  project;  make  sure 
they  conform  to  the  enterprise  architecture. 

•  Don’t  make  architecture  artifacts  so  esoteric 
that  no  one  uses  them  after  they  are  written. 

Minoli  is  an  adjunct  professor  in  the  Stevens 
Institute  of  Technology’s  graduate  school.  He  can 
be  reached  at  minoli@att.net. 


Collaboration  key  to  distributed  data  oversight 


Everyone  agrees  that  data  is  a  precious  cor¬ 
porate  resource.  Everyone  also  agrees  that 
corporations  should  keep  this  resource 
clean,  current  and  fit  for  business.  Some  in  the 
data  management  industry  have  stressed  the 
need  for  a  new  corporate  role,  the  data  steward, 
who  manages  data  in  keeping  with  a  broad  busi¬ 
ness  perspective  and  an  eye  toward  organization- 
wide  quality  and  standardization. 

Data  stewardship  is  an  important  business  func¬ 
tion,  but  there’s  no  clear  industry  consensus  about 
the  need  for  a  distinct  data  steward  role. The  core 
problem  is  that  the  role  has  no  clear  boundaries. 
Depending  on  whom  you  ask,  a  data  steward  may 
be  simply  a  data-quality  specialist  or  an  all- 
powerful  data  governance,  business  intelligence 
and  compliance  czar.  In  most  cases,  the  data  stew¬ 
ard  role  overlaps  considerably  with  established 
positions  such  as  business  analyst,  database 
administrator  (DBA), data  modeler, data  manager, 
data  security  manager  and  storage  manager. 

Data  steward,  as  a  stand-alone  job  category, 
would  have  a  tough  time  justifying  its  continued 
existence  in  periods  of  corporate  austerity.  Con¬ 
sidering  the  extent  to  which  data  stewards  handle 
functions  performed  elsewhere  in  the  IT  organ¬ 
ization,  they  would  be  acutely  vulnerable  to  the 
budgetary  ax.  What’s  the  point  of  continuing  to 
fund  such  a  position  when  its  core  responsibili¬ 
ties  can  be  easily  distributed  to  other  personnel? 

However,  data  stewardship  is  too  critical  a  busi¬ 
ness  function  to  let  die.  It’s  everybody’s  job, on  both 
the  IT  and  business  sides  of  the  house.  And  it 
requires  a  governance  environment  in  which  an 


organization’s  users,  analysts,  DBAs  and  other  per¬ 
sonnel  collectively  monitor  and  maintain  the 
quality  consistency  standardization  and  relevance 
of  operational  data.  At  the  heart  of  that  gover¬ 
nance  environment  should  be  a  corporate  frame¬ 
work  of  policies,  best  practices  and  collaboration 
tools  for  managing  data  across  the  life  cycle. 

Collaboration  is  key  to  distributed  data  steward¬ 
ship.  For  each  important  corporate  data  resource, 
organizations  need  to  provide  collaborative  envi¬ 
ronments  within  which  all  stakeholders  —  includ¬ 
ing  users,  data  owners,  DBAs  and  developers  — 

It’s  everybody’s  job,  on 
both  the  IT  and  business 
sides  of  the  house. 

can  work  through  the  myriad  issues  concerning 
how  information  is  modeled,  classified,  collected, 
profiled,  cleansed,  transformed,  consolidated  and 
reported.  Using  administrative  workflows,  discus¬ 
sion  forums  and  other  tools,  IT  and  business  per¬ 
sonnel  should  be  able  to  propose,  discuss,  define 
and  monitor  the  full  set  of  stewardship  policies 
implemented  within  their  master  data  manage¬ 
ment  (MDM)  environment. 

Few  vendors  have  addressed  the  need  for  a 
comprehensive  collaboration  environment  to 
support  distributed  data  stewardship.  At  most,  ven¬ 
dors  provide  tool  sets  to  help  different  job  cate¬ 
gories  carry  out  diverse  stewardship-related  func¬ 
tions,  such  as  data  profiling  and  cleansing,  data 


modeling  and  mapping.  However,  vendors  are 
beginning  to  address  the  need  to  provide  an  envi¬ 
ronment  in  which  these  roles  can  come  together 
to  meet  common  MDM  requirements. 

Reporting  vendor  Actuate  recently  upgraded  its 
flagship  product  to  provide  an  Asynchronous 
JavaScript  +  XML-enabled  ad  hoc  report  develop¬ 
ment  environment  that  lets  users  and  IT  depart¬ 
ments  collaborate  on  report  definitions  and 
evolve  report  designs.  Actuate ’s  new  Collaborative 
Reporting  Architecture  lets  IT  developers,  busi¬ 
ness  analysts  and  users  fine-tune  development  of 
Web  reports  through  iterative  design-level  interac¬ 
tions,  in  which  each  group  uses  report  design 
tools  appropriate  to  its  skill  sets.  By  enabling  shar¬ 
ing  of  report  designs  via  a  common  metadata 
store,  the  Actuate  9  platform  helps  ensure  that  all 
stakeholders’  reporting  requirements  are  consid¬ 
ered,  a  function  that  a  data  steward  otherwise 
might  perform. 

Over  the  next  several  years,  expect  to  see  ven¬ 
dors  provide  collaboration  features  to  facilitate 
distributed  stewardship  across  the  full  range  of 
life-cycle  data  management  functions.  To  the 
extent  that  enterprises  continue  to  designate  spe¬ 
cific  individuals  as  data  stewards,  these  people 
will  be  increasingly  responsible  for  coordinating 
the  multistakeholder  collaborations  necessary  for 
policy-driven  MDM. 

Kobielus  is  a  principal  analyst  at  Current  Analysis 
in  Alexandria,  Va.  He  can  be  reached  at  jkobielus 
@currentanalysis.com.The  opinions  expressed  are 
his  own. 


THERE  IS  AN  ALTERNATIVE 

Your  global  IP  carrier  should  set  you  free,  not  hold 
you  down.  It  should  be  nimble  and  flexible  enough 
to  deliver  innovative  IP  solutions  and  superior 
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support  yet  expansive  enough  to  offer  the  global 


scope  and  scale  your  business  requires.  Enter 
Global  Crossing.  Our  wholly-owned  global  IP 
network  connects  you  virtually  anywhere  instantly. 
It  works  effortlessly  with  your  current  legacy  system 
and  with  IP  services  yet  to  be  envisioned.  All  with 
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an  industry  leader.  It's  no  wonder  so  m< 

FORTUNE  500®  companies  depend  on  us.  Le 


more  at  www.globalcrossing.com 


One  planet.  One  network.™ Infinite  po^.biiiiies 
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YOUR  INTERN  JUST  HAD  A  $100,000  PAYDAY. 
UNFORTUNATELY,  IT  WAS  FROM  THE  SALE  OF  YOUR  DATA. 

If  your  data  could  talk,  it  would  tell  you  that  it  could  be  stolen  from  right  under  your  nose.  If  your  enterprise  suffers 
a  data  breach,  are  you  ready?  That's  why  there's  EpiForce™  from  Apani  Networks™.  It's  built  from  the  ground  up  to 
secure  data  inside  the  perimeter.  Plus,  it's  highly  scalable,  centrally  managed  and  supports  multiple  OS  platforms. 
EpiForce  can  help  secure  your  sensitive  data  from  a  threat  that  could  be  just  around  the  corner. 


To  learn  more  a  bout  insider  threats,  get  a  free  copy  of  "The  Insider  Threat  Benchmark  Report" 
published  by  the  AberdeenCr oup.  Get  a  free  copy  at  www.apani.com/nw-insider 


your  salary:  on  GGe  rise 

Decent  pay  raises  and  hefty  bonus¬ 
es  pushed  ’06  total  compensation 
up  by  almost  6%.  See  story,  at  right. 
ilM  Use  our  interactive 
Salary  Calculator  to  determine 
your  earning  potential, 
www.nwdocfinder.com/4430 
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Faced  with  tough 
workplace  chal- 
WL  I  lenges,  three  IT  pros 
*  show  their  decision- 
w  making  savvy  Plage 

45.UMtChime 
in  with  your  opin¬ 
ions  on  how  to  han¬ 
dle  these  sticky  situ¬ 
ations.  www.nwdocfinder.com/442 1 


Three  IT  executives  share 
advice  for  crafting 
visionary  strategic 
plans.  Page  50. 


An  inside  look  at 
three  of  the  cool 
places  you  do  your 
jobs.  Page  54.  ___ 

■UH  HI  Go  onsite  —r r > 1  ■ 
at  these  workplace  in  our  new 
“You  in  action”  video  series. 
www.nwdocfinder.com/4422 


All  about  you 
Pizza  and  iFbds, 
rock-and-roll  and 
Jackie  Chan  -  these 
are  a  few  of 
your  favorite 
things. 

Page  60. 


THEYOU  ISSUE  IS  ONE  OF 
SIX  BIMONTHLY  ISSUES  PRO¬ 
VIDING  INSIGHTS,  OPINIONS  AND  INFORMATION 
ON  THE  BIGGEST  TRENDS  SHAPING  THE  NET¬ 
WORKED  WORLD.  LOOK  FOR  THE  ENTERPRISE 
ALL-STAR  ISSUE.  COMING  SEPT.  25. 
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imes,  they  are  a-changin’  for  network  professionals. 
Pay,  which  has  always  been  good,  is  rising  —  though 
perhaps  not  fast  enough  for  the  IT  workforce’s  taste. 
But  the  trade-off  for  those  cushy  paychecks  —  bru¬ 
tal  hours  and  inflexible  schedules  —  has  also  begun  to  fade, 
according  to  Network  World’s  2006  Salary  Survey  of  1,841  respon¬ 
dents  conducted  with  researchers  King  Brown  Partners. 

The  workaholic  pressure  so  common  for  IT  workers  over  the  last  decade  is  on  the 
decline  as  network  professionals  report  higher  satisfaction  rates  for  family  friendliness  and 
work/life  balance  issues  than  previous  survey  respondents.  Respondents  also  claimed 
higher  satisfaction  with  job  security  —  rated  the  No.  1  priority  —  than  they  had  previous¬ 
ly.  It  all  points  to  an  increasingly  vibrant  IT  job  market  in  which  employers  are  appreciat¬ 
ing  their  IT  workers  and  working  harder  to  keep  them  happy. 

“People  are  at  more  of  a  comfort  level,”  explains  Marshall  Curtis,  IT  director  for  the 
Carlisle  Walker  Group, a  Madison, Wis.,  holding  company  for  diversified  manufacturing  divi- 
sions.They  don’t  foresee  a  lot  of  changes  in  their  companies  and  are  feeling  more  satis¬ 
fied.  They  are  not  as  worried  about 


downsizing  or  outsourcing  as  they  were 
three  or  four  years  ago.” 

As  IT  rises  in  corporate  importance 
while  experienced  workers  remain  hard 
to  find,  companies  are  offering  employ¬ 
ees  better  rewards.  Overall,  base  pay 
increased  5.4%  with  bonuses  up  a 
healthy  14.2%. Base  pay  for  the  highest- 
ranking  network  professionals  (those  in 
CIO,  CTO  or  senior  vice  president-level 
positions)  rose  6.5%  for  2006  to  $132,560. 
Network  professionals  with  middle  man¬ 
agement  jobs  (LAN/WAN/telecom  direc¬ 
tors/managers  responsible  for  both  tech- 


salary  eaieuiai 

An  online  tool 

Simply  plug  in  requested  criteria  —  fac¬ 
tors  such  as  title,  age,  region  and  yeai  -  of 
experience  —  and  we’ll  calculate  your 
earning  potential  based  on  data  collect¬ 
ed  in  our  2006  Salary  Survey 
Go  to  www.nwdocfinder.com/ 4430 
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Raises  aren’t  out 
but  they  do  beat  the  pan 
cost-of-living  increases. 

Network  World  2006  Salary  Survey 


high 
off  the 


JOB 


nology  and  people)  saw  an  increase  of 
5.2%  to  $84,510.  Staff  positions  (those 
who  manage  technology  but  not  peo¬ 
ple)  jumped  5.3%  to  $66,190  (see  “What 
you  earn,”  below). 

Raises  are  not  outrageously  high  but 
they  do  beat  the  pants  off  the  cost-of-liv¬ 
ing  increases.  The  average  inflation  rate 
in  2005  was  3.7%,  according  to  Inflation 
data.com.  When  adding  in  bonuses, 
stock  and  other  benefits  (such  as  car 
allowances),  network  executives  report¬ 
ed  an  8%  leap  in  total  compensation, 
landing  at  $162,580.  Middle  managers 
saw  total  compensation  increase  5.5%  to 
$95,310,  and  staffers  reported  gains  of 
5.4%  to  $71,790. 

Still,  respondents  surprisingly  reported 
that  they  aren’t  all  that  happy  with  their 
pay  packages.  They  ranked  overall  com¬ 
pensation  as  their  No.  2  priority  (after  job 
security)  yet  placed  it  last, at  No.20,when 
asked  how  satisfied  they  were  with  it. 
Benefits  ranked  No.  3  in  importance  but 
lagged  in  satisfaction,  landing  at  No.  15. 
Base  salary  rated  No.  4  in  importance 
and  ranked  No.  11  in  satisfaction  (see 
“Least  satisfied  with  pay/’ page  44). 

Such  dissatisfaction  may  be  caused  in 
part  by  wildly  uneven  stock-based  com¬ 
pensation  —  once  the  star  benefit  for  IT 
workers  at  every  career  level.  Average 
stock-based  compensation  declined 
3.5%.  Middle  management  was  particu¬ 
larly  hard  hit,  tallying  a  26.1%  decline. 


Staff  saw  a  4.8%  decline.  Only  senior 
management  did  well  with  stock  perks 
—  in  fact,  network  executives  raked  in  a 
whopping  49.8%  increase  in  their  stock- 
based  pay 

Except  for  the  highest  ranking  IT  exec¬ 
utives,  companies  have  switched  from 
stock-based  rewards  to  bonuses,  offering 
sizeable  bonus  increases  for  2006.  The 
14.2%  average  bonus  hike  equates  to 
$5,790.  Those  in  staff-level  positions 
expect  an  average  16.3%  hike  to  $2,920, 
with  those  doing  training,  help  desk  and 
technical  support  work  reporting  the 
biggest  percentage  hike,  a  hefty  46.7%  to 
$2,230.  Meanwhile,  network  executives 
expect  a  10.2%  increase  to  $23,240  while 
middle  managers  expect  a  13.2%  hike  to 
$6,840. 

Net  executives  attribute  the  emphasis 
on  bonuses  to  the  economy,  which  is 
cranking  along  well  enough  to  be  pro¬ 
ductive  and  stable  but  isn’t  so  pre¬ 
dictable  that  employers  want  to  commit 
to  permanent  base  pay  increases. 

“Bonuses  are  important  because  they 


work  for  both  sides.They  reward  employ¬ 
ees  for  what  they’ve  done  but  are  not 
long-term  commitments  for  manage¬ 
ment,”  says  Scott  Williams,  CIO  for 
Longview  Capital,  a  financial  holding 
company  in  Newman,  Ill. 

Carlisle  Walker’s  Curtis  adds  that  bonus 
hikes  are  high  this  year  because  IT  is 
finally  catching  up  to  the  compensation 
schemes  offered  for  other  business  units. 
Within  the  last  couple  of  years,  IT  has  lost 
its  reputation  as  a  straight  overhead  ex¬ 
pense,  and  IT  workers  are  now  getting 
bonuses  based  on  overall  company  per¬ 
formance  at  similar  rates  to,  say,  the  mar¬ 
keting  or  production  employees.  “For 
myself  —  and  other  IT  senior  manage¬ 
ment  —  bonus  programs  are  the  same  as 
they  are  for  any  other  business  manager. 
It  is  not  IT-specific,”  he  says. 

Job  hopping  and  education 

For  the  first  time,  we  asked  survey  re¬ 
spondents  about  promotions.  Interest¬ 
ingly,  middle  management  reported  the 
most  promotions  from  current  em¬ 


ployers,  averaging  1.97.  This  exceeds 
senior  managers,  who  report  1.55  during 
the  course  of  their  current  employment. 
Those  in  staff  positions  earned  1.38  pro¬ 
motions. 

And  $60,000  seemed  to  be  the  magic 
base  pay  number  for  ladder  climbing. 
Those  who  hit  or  exceeded  that  mark 
reported  the  most  promotions  (see  “Who 
gets  the  most  promotions?”  page  44).  In 
addition,  employees  working  for  large 
companies  reported  more  promotions 
than  those  at  smaller  companies,  as  did 
women  over  men  and  people  who  toil 
the  longest  hours  vs.  those  with  shorter 
work  weeks. 

But  the  survey  also  found  that  the  age- 
old  job-hopping  strategy  clearly  pays. 
Those  who  had  worked  for  three  or  more 
employers  in  their  careers  tended  to 
make  more  money  than  the  stay-with- 
the-same-  company  types.  Job  hoppers 
reported  an  average  of  $85,200  in  2006 
base  pay  compared  with  the  loyalists  at 
$74,010.  Job  hoppers  also  are  responsi¬ 
ble  for  more  people  and  servers,  tend  to 
have  worked  in  IT  longer,  work  more 
hours  per  week,  are  male  and  are  slight¬ 
ly  older  than  the  loyalists. 

The  survey  results  hint  that  job  hop¬ 
ping  may  soon  swing  into  vogue.  Slightly 
more  network  professionals  are  fervently 
seeking  new  employment  this  year  com¬ 
pared  with  2005.  Slightly  more  also  are 
actively,  but  casually,  exploring  new 
employment  options.  These  job  hunters 
have  come  from  the  ranks  of  those  who 
previously  had  been  approachables  — 
not  pounding  the  pavement  but  willing 
to  apply  for  a  new  job  if  asked  to  do  so 
(see  “Job  seekers  vs.  loyalists,”  page  44). 

But  job  hopping  includes  some  sacri¬ 
fice,  with  job  hoppers  reporting  fewer 
promotions  with  their  current  company 
and  less  tenure  than  the  loyalists. 

“If  you  are  starting  out,  definitely  the 
way  to  go  is  job  hopping.  It’s  a  fast  way 
See  Salary,  page  42 
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Network  World’s  2806  Salary  Survey  shows  healthy  compensation  increases 
across  the  board,  with  an  emphasis  on  bonuses. 


GROUPING 

2006  base 
pay' 

Base 

salary% 

change*’ 

2006 

bonus 

Bonus  % 
change 

Stock  % 
change 

2006  total 
compensation*” 

Change 
from  2005 
compensation 

|  Net  execs/senior  management 

$132,560 

6.5% 

$21,850 

12.9% 

49.8% 

$162,580 

CO 

CD 

* 

CIO 

$134,060 

7.3% 

$20,940 

15.0% 

53.9% 

$163,130 

8.9% 

Senior  VP/VP  MIS/IT/IS/DP 

$130,270 

5.2% 

$23,240 

10.2% 

44.6% 

$161,730 

6.5% 

1  Middle  management 

$84,510 

5.2% 

$6,840 

13.2% 

;  -26.1% 

$95,310 

5.5% 

MIS/IT/IS/DP  manager 

$84,420 

5.7% 

$7,230 

17.6% 

-33.2% 

$95,680 

5.6% 

LAN,  WAN  or  network  manager 

$82,350 

4.8% 

$5,780 

7.0% 

0.9% 

$92,640 

6% 

Telecom  manager 

$86,740 

5.3% 

$8,580 

29.2% 

-17.6% 

$98,450 

6.6% 

Internet,  intranet,  e-commerce  manager 

$88,830 

4.2% 

$6,170 

6.7% 

-26.9% 

$99,300 

5.99% 

j  Staff 

$66,190 

5.3% 

$2,920 

16.3% 

-4.8% 

$71,790 

5.4% 

LAN,  WAN  or  network  administrator 

$63,270 

5.3% 

$2,330 

18.9% 

46.7% 

$67,700 

5.6% 

Network  architect,  designer,  analyst 
or  database  administrator 

$74,310 

5.6% 

$4,040 

6.9% 

-6.3% 

$81,130 

5.2% 

Network  operator,  technician  or  other 
network  operations  staff 

$53,510 

4.5% 

$1,840 

26.9% 

-2.6% 

$58,110 

4.8% 

Trainee  help  desk,  tech  support 

$50,310 

5.9% 

$2,230 

46.7% 

57.9% 

$54,670 

6.8% 

Software  or  Web  programmer/deveioper 

$70,990 

4.6% 

$4,040 

27.0% 

-16.8% 

$79,710 

6.5% 

Average,  ail  raspondents 

$77,800 

5.4% 

$5,790 

14.2% 

-3.5% 

$87,150 

5.8% 

’**  ttftr  n  mu.  "Pwort  charges  reflect  changes  from  2906  U)  2006.  *”fai  compensation  refutes  base  pay.  boms,  stock  options  and  other  payment 


Pay  increases  as 
company  size  increases 


NO.  OF  EMPLOYEES  i  AVERAGE  2006  BASE  PAY 
Fewer  than  100  $69,310 

100  to  999  employees  $75,840 

1,000  to  9,999  $79,280 

Greater  than  10,000  $82,590 
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See  Why  More  &  More  Businesses  are  Switching  to  D-Link 

"The  State  of  Louisiana  entrusts  us  with  sensitive  information. 
We  trust  D-Link ®  NetDefend™  and  switching  to  keep  our  data 
and  communications  secure. " 

-Collis  Temple,  CEO 
Harmony  Center,  Inc. 


Proven  Enterprise-Level  Networking  &  Security  is  Now  Within  Your  Reach 

Network  security  is  no  longer  a  luxury.  But  you  can’t  afford  to  have  your  security  solution  grind  your  productivity 
to  a  crawl,  either.  Harmony  Center,  Inc.  chose  D-Link  switching  and  security  solutions  to  get  both  protection  and 
speed  —  affordably. 

D-Link  provides  End-to-End  Solutions  for  Smail  and  Medium  Business.  The  switches  that  make  up  your  network 
backbone,  advanced  firewalls  and  Virtual  Private  Networks  (VPN),  Network  Attached  Storage  (NAS),  business- 
class  wireless  —  D-Link  wants  to  be  your  IT  vendor  of  choice,  and  we  believe  we  have  earned  that  consideration, 
Our  products  match-up  feature  for  feature,  and  as  a  true  designer  and  manufacturer  we  are  in  direct  control  of 
both  quality  and  costs.  That  means  you  get  the  highest-quality  products  with  the  most  aggressive  pricing  in  the 
industry.  Connections  Made.  Money  Saved.  Period. 


Trust  the  Global  Leader  in  SMB  Connectivity 
f  END  TO  END  SOLUTIONS 

From  the  core,  to  the  edge,  to  wireless  switching:  D-Link  provides  t-Ullk@Wt!( 


complete  end-to-end  networking  solutions  for  your  business 

f  MARKET  LEADERSHIP 

Shipping  more  than  100,000  connections  a  day  worldwide, 
D-Link  is  the  market  share  leader  in  SMB  connectivity' 

PRODUCT  EXCELLENCE 

Put  your  trust  in  a  true  designer  and  manufacturer  that's  been 
delivering  excellence  in  engineering  for  two  decades 


D-Link  celebrates  20  years  of 
networking  excellence.  Limited  time 
savings  on  over  300  products! 

Learn  more  at  www.dlink.com/at-work 

.r  can  1 -888-XSTACK1 


D-LINKfr/WORK 

End-to-End 

Networking  Solutions  for 
Your  Growing  Business 


O  NetDefend 


Xs  TACK 

Switching 
IP  Telephony 
Network  Storage 


34/]rPremier 

(^Wireless 


Market  Share  information  derived  from  In-Stat  <  J?  2005  Wireless  LAN  Equipment.  i-ihcmei  I  AN  Switch  atul  Broadband  Equipment  Market  Share  Reports.  Prices  and  spec  ifical  ions  arc  subject  u>  change 
«.  »:houi  notice.  0*1  ink.  the  0-1. ink  logo.  NetDefend.  AirPtvmier  and  \ Slack  arc  trademarks  or  registered  trademarks  of  D-Link  Corporation  or  iis  subsidiaries  in  the  l  nited  States  and  other  countries. 

MS  otlvct  company  or  product  names  mentioned  herein  arc  trademarks  or  registered  trademarks  of  their  respective  companies.  Copyright »'  200b  D-Link- -Corporation  D-Link  Systems,  Inc.  www  dlink.com 
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Building  Networks  for 
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a  promotions  op  region 


2006 
base  pay* 


%  change 
prom  ’05 


Number  of 
Promobions** 


West  (Ariz.,  Colo.,  Idaho,  Mont,  N.M.,  Nev.,  Utah,  Wyo.) 

$80,020 

6.85% 

1.38 

Pacific  (Alaska,  Calif.,  Hawaii,  Ore.,  Wash.) 

$85,640 

6.06% 

1.69 

■i  (Conn.,  Maine,  Mass.,  N.H.,  R.I.,  Vt.) 

$85,560 

4.66% 

1.36 

South  Atlantic  (Fla.,  6a.,  Md.,  Del.,  N.C.,  S.C.,Va.,  W.Va.) 

$79,920 

4.87% 

1.58 

Middle  Atlantic  (N.Y.,  Pa.,  N.J.) 

$79,910 

4.83% 

1.65 

Southwest  (Ark.,  Okla.,  La., Texas) 

$74,970 

6.95% 

1.64 

Southern  Midwest  (Ala.,  Ky„  Miss.Jenn.) 

$73,390 

6.07% 

1.83 

Northern  Midwest  (III.,  Ind.,  Ohio,  Mich.,  Wis.) 

$70,240 

4.59% 

1,43 

Northwest  (Iowa,  Minn.,  N.D.,  S.D.,  Mo.,  Kan.,  Neb.) 

$69,380 

5.83% 

1.69 

*  Mean  average,  vindicates  average  number  of  promotions  during  time  with  current  employer  by  region. 


‘There’s  more 
freedom  in  a 
small  company:’ 

seofiD  iiiiiiiams.  cio, 
longvieui  capital  in 
Newman,  III. 
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WE  COULD  GO  ON  AND  ON 
ABOUT  HOW  IT  GOES  ON  AND  ON. 


Xeon* 

inside'" 


The  IBM  System  x3500  Express,  with  Dual-Core 
Intel®  Xeon®  Processors,  is  designed  to  help  increase 
reliability.  And  if  there’s  the  sign  of  a  potential  hardware 
problem,  IBM  Light-Path  Diagnostics  can  pinpoint  it. 
Quickly.  So  you  can  take  care  of  it.  Quickly. 

With  IBM,  innovation  comes  standard.  It’s  that  simple. 


IBM  System  x3500  Express 

Great  for  Web-serving,  messaging  and  collaboration,  or  business  apps. 

Starting  from  $2,189'  or  SeO/month1 

Up  to  two  Dual-Core  Inter  Xeon®  Processors  5150-3GHz  2  x  2MB  L2  Cache 

Light-Path  Diagnostics  pinpoints  hardware  problem  areas 

Up  to  48GB  667MHz  High  Performance  memory 

Up  to  2.4TB  Hot  Swap  SAS  or  4.0TB  Hot  Swap  SATA 

RAID  0,1,5  standard  and  redundant  power  capability 

Limited  warranty:  3  years  on-site2 


IBM  System  x3650  Express 

Starting  from  $2,309'  or  Sea/month1 


IBM  eServer™  xSeries®  206m  Storage  Server  Express 

Starting  from  $3,049'  or  $83/month' 


Dual-Core  Intel*  Xeon®  Processor  up  to  3.20GHz 
Two-way  2U  rack  server 
Up  to  48GB  High  Performance  memory  using 
12  DIMM  slots 


Predictive  Failure  Analysis®  and 
Light-Path  Diagnostics  help  provide 
easy  identification  of  hardware  problems 
Limited  warranty:  up  to  3  years  on-site2 


Dual-Core  Intel®  Pentium®  D  Processor  2.80GHz 
1 TB  Hot  Swap  SATA  storage  (4  x  250GB  HDDs) 
Windows®  Storage  Server  2003  R2 
Standard  Edition  64-bit 


5  Client  Licenses  Tivoli®  CDP  (1  year) 
ServeRAID-8i  card  with  redundant 
power  supply 

Limited  warranty:  3  years  on-site2 


COMPLIMENTARY  IBM  SYSTEMS  ADVISOR  TOOL 

Tell  the  IBM  Systems  Advisor  what  your  I.  T.  needs  are.  And  it  will  automatically  suggest  a  server  or  storage  product  to  help 
meet  your  requirements. 

ibm.com/systems/innovate40  1  866-872-3902  mention  104CE33A 


•All  prices  are  IBM's  estimated  retail  selling  prices  as  o!  June  27, 2006.  Prices  may  vary  according  lo  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to  availability.  This  document  was  developed  lor  olferings  in  the  United  Slates.  IBM  may  not  otter 
the  products,  teatures,  or  services  discussed  in  this  document  in  other  countries.  Prices  subject  lo  change  without  notice.  Starting  price  may  not  include  a  hard  drive,  operating  system  or  other  leatures.  Contact  your  IBM  representative  or  IBM  Business  Partner  lor  Ihe  most  current  pricing  in  your  geography. 
1  IBM  Globa!  Financing  offerings  are  provided  through  IBM  Credit  LIC  in  the  United  Stales  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  goverrimenl  customers  Monthly  payments  provided  are  tor  planning  purposes  only  and  may  vary  based  on  your  credit  and  other 
(actors  Lease  otter  provided  is  based  on  a  FMV  lease  o!  36  mondily  payments  Other  restrictions  may  apply.  Rates  and  otterinys  are  subject  to  change,  extension  or  withdrawal  without  notice.  2  IBM  hardware  products  are  manufactured  horn  new  parts,  or  new  and  serviceable  used  parts  Hegatdless,  our 
warranty  terms  apply,  for  a  copy  ol  applicable  product  warranties,  write  to;  Warranty  Information,  P.0.  Box  12195.  RIP.  NC  27709.  Aitri:  Dept.  JDJA/8203.  IBM  makes  no  representation  or  warranty  regarding  third-party  products  or  services  including  those  designated  as  ServerProven  or  ClusterProven. 
Telephone  support  may  be  subject  to  additional  charges  For  on-sile  labor.  IBM  will  attempt  to  diagnose  and  resolve  Ihe  problem  remotely  before  sending  a  technician.  On-site  warranty  is  available  only  tor  selected  components.  IBM.  the  IBM  logo.  Predictive  Failure  Analysis,  eServer,  xSeries  and  Tivoli  are 
trademarks  or  registered  trademarks  ot  International  Business  Machines  Corporation  in  Ihe  United  Stales  and/or  other  countries.  Intel,  Intel  Inside,  the  Intel  Inside  logo.  Inlel  Xeon,  Xeon  Inside  and  Pentium  are  trademarks  or  registered  Irademaiks  of  Intel  Corporation  or  its  subsidiaries  in  Ihe  United  Slates 
and  other  countries  Windows  is  a  trademaik  of  Microsoft  Corporation  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  ot  others.  ©  2006  IBM  Corporation.  All  rights  reserved. 
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S&inry 

continued  from  page  42 

to  get  better  pay  and  [learn]  different  things  in  the 
industry.  But  you  trade  off  stability’ says  Ron  Barrett,  IT 
director  for  accounting  firm  ERE,  in  New  York.  Barrett, 
35,  worked  for  six  companies  during  the  heady  Internet 
bubble  days.  But.  spurred  by  the  birth  of  his  second 
child,  he  has  been  at  his  current  employer  for  five  years 
and  now  highly  values  job  security,  he  says. 

Interestingly,  education  does  not  significantly  affect 
promotions. This  doesn’t  mean  that  formal  education 
has  no  impact  on  compensation.  As  education  level 
rises,  so  does  pay,  with  those  holding  graduate 
degrees  earning  the  most  money,  averaging  $102,100 
base  pay. This  compares  with  $79,430  for  those  with  a 
bachelor’s  degree  and  $64,220  for  those  with  an  asso¬ 
ciate  degree.  Still,  those  with  graduate  degrees  only 
reported  slightly  more  promotions  than  those  with 
less  formal  education. 

Certifications  had  even  less  of  an  effect.This  year’s  sur¬ 
vey,  like  the  data  from  the  previous  five  years,  finds  that 
certifications  have  no  positive  effect  on  compensation. 
Respondents  with  no  certificates  reported  more  pro¬ 
motions  and  greater  earnings  than  those  with  two  or 
more  certifications.  In  2006,  network  professionals  with 
no  certifications  report  average  base  pay  of  $81,710 
while  those  with  two  or  more  certifications  earned 
$77,270. 

Network  executives  say  certifications  do  not  con¬ 
tribute  to  promotions  or  to  base  pay  because  they  are 
an  ineffectual  method  of  evaluating  and  rewarding 
employees.  Vendors  offer  such  an  enormous  range  of 
certifications,  many  of  them  easy  to  achieve,  that  the 
value  of  the  certification  process  has  been  watered 
down.  Likewise,  certifications  do  not  prove  real-world 
skill. 

“Certificates  are  not  particularly  important,”  says 
Barrett,  a  Microsoft  Certified  Systems  Engineer.  “The 
biggest  benefit  is  in  dealing  with  outside  regulators.  It 
basically  shows  I  know  what  I’m  doing.  A  cert  shows  at 


The  people  who  remain  in 
IT  have  said,  Enough.  I  can’t 
work  70  hours  a  week.  Si 

Marshall  Curtis,  IT  director,  Carlisle  Walker  Group 


least  you  know  enough  to  pass  the  test.  But  [when  hir¬ 
ing  or  promoting],  we  look  at  experience,  customer  ser¬ 
vice  and  skills,”  he  says. 

The  hottest  skills,  network  executives  agree,  are  secu¬ 
rity,  telephony,  wireless,  remote  access,  routing,  and 
LAN/WAN  design  and  management.“I  tend  to  steer  peo¬ 
ple  toward  the  LAN  and  networking  side.  You  don’t 
worry  about  outsourcing.  Companies  are  always  going 
to  need  someone  here  looking  after  the  LAN  and  net¬ 
work,”  Barrett  says. “The  standards  will  always  be  there, 
too  —  basic  admin  of  a  Windows  network.  Is  it  hot?  No, 
but  it  is  always  going  to  be  needed.” 

Size  and  work/life  balance 

Two  factors  that  determine  high  pay  are  geographic 
region  and  company  size.  Not  surprisingly  in  areas 
where  the  cost  of  living  is  high,  pay  is  higher.  These 
areas, such  as  in  Massachusetts  and  California,  are  also 
longtime  hotbeds  for  the  technology  industry  which 
increases  the  number  of  IT  jobs  available. 

The  size  of  the  corporation  also  is  significant.  Simply 
put,  the  larger  the  corporation,  the  higher  the  pay,  bonus¬ 
es  and  benefits.  Yet  workers  in  larger  corporations  are 
more  likely  to  be  seeking  new  positions  than  those  in 
smaller  firms,  while  those  in  smaller  firms  are  more  likely 
to  be  loyalists  —  not  able  to  envision  changing  jobs  in  the 
foreseeable  future.  What  gives?  Net  executives  at  smaller 
companies  say  that  they  simply  enjoy  their  jobs  more  and 
are  willing  to  sacrifice  a  bit  of  pay  for  that. 


“There’s  more  freedom  in  a  small  company  I  have  to 
cover  more  duties, so  I’m  given  a  lot  of  leeway  in  how  I  do 
it.  Taking  pay  out  of  the  equation,  it’s  a  lot  better  to  be  a 
big  fish  in  the  little  pond  than  a  medium  fish  in  a  big 
pond.  If  I  worked  for  a  big  company  and  was  an  e-mail 
administrator,  then  all  I  would  do  all  day  long  is  e-mail,” 
Longview’s  Williams  explains. 

The  good  news  is  that  network  professionals  in  all 
regions  and  all  size  companies  are  enjoying  better  bal¬ 
ance  between  their  work  and  personal  lives  than  they 
have  in  a  long  time.  Respondents  rated  flexible  work 
schedules  the  No.  1  area  of  job  satisfaction.  Family 
friendliness  was  No.  2,  while  areas  such  as  proximity  to 
home  and  vacation  packages  also  landed  in  the  top  10. 
(For  the  full  “Satisfaction  Ratings”  chart,  head  online  to 
www.nwdocfinder.com/4429.) 

Many  network  professionals  have  permanently 
shelved  the  workaholic  era,  Carlisle  Walker’s  Curtis  says. 
The  Internet  bubble  days  drew  an  influx  of  people  that 
“didn’t  put  a  high  value  on  family  friendliness,  so  the 
companies  didn’t  need  to  offer  it,” he  says.The  following 
economic  “backlash  and  downsizing”  sifted  out  most  of 
the  folks  without  long-term  career  aspirations  in  IT  but 
those  scary  downsizing  days  also  forced  workers  to 
continue  on  with  long  hours,  doing  more  with  less,  for 
the  sake  of  job  security, he  explains.  As  of  2006, “the  peo¬ 
ple  who  remain  in  IT  have  said, ‘Enough.  I  can’t  work  70 
hours  a  week,’”  and  the  job  market  is  responding,  to  the 
satisfaction  of  many.  ■ 


Lease  saGisFied 
until)  pay 


jod  seekers  vs.  loyalisGs 


As  the  job  market  improves,  slightly  more  network 


The  importance  and  satisfaction  ratings  of  20  job 
criteria  show  that  respondents  are  least  happy 
with  their  job’s  financial  rewards. 

Importance  Satisfaction 
rank  rank 


professionals  have  joined  the  ranks  of  those  actively 
looking  for  a  new  position.  20Q5 
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Job  security 

1 

4 

Overall  compensation 

2 

20 

Benefits  package 

3 

15 

Base  salary 
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11 
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9 
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3 
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7 

16 
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5 

Annual  raises 

9 

12 
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People  in  the  following  demographic  groups 
reported  the  most  promotions  from  their  current 
employers. 


Group 

10,000+  employees  in  company 

Promotions 

2.13 

Middle  management  titles 

1.97 

55+  hours  worked  per  week 

1.94 

Women 

1.93 

Base  pay  of  $100,000+ 

1.92 

Southwest  region 

1.83 

Base  pay  of  $80,000  to  $99,000 

1.79 

No  certifications 

1.79 

1,000  to  9,999  employees 
in  company 

1.76 

Base  pay  of  $60,000  to  $79,000 

1.59 

'MEAN  AVERAGE.  AT  CURRENT  EMPLOYERS 
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CHALLENGE  1 


*  Faced  mibh  bough  workplace 

challenges,  bhpee  II  pros  show 

bheir  decision-making  savvy. 


Bruns:  Overhauling  an  organization’s  technology  infrastructure  is  a  lot 
easier  if  you  know  who  thinks  they  own  what.  Meetings  or  committees  are 
a  necessary  evil.  Users,  managers,  department  heads  must  be  pulled  in  to 
provide  feedback  on  what  they  feel  is  the  largest  hurdle  and  what  needs 
to  be  tackled  first.  Because  this  is  a  large  organization, several  committees 
will  need  to  be  formed.You  don’t  have  to  agree  with  everyone, but  to  lead 
the  group  in  the  necessary  direction.  A  sense  of  ownership  by  the  organization  in  charge  leads 
to  a  more  productive  transition,  broad-based  support  and  pushes  disagreements  more  to  the 
departmental  level  than  against  an  IT  leader  and  staff. 

Once  the  political  front  has  been  addressed.it  is  then  time  to  go  to  work.The  mainframe  is  just 
a  box  that  is  running  some  form  of  ERP  software.  An  ERP  conversion  is  an  18-month  to  three-year 
project  and  while  important,  it  is  far  more  important  to  replace  the  mainframe  with  a  server. 
Blade  servers  work  very  well,  reduce  space  and  power  usage,  and  allow  for  multiple  servers  to 
be  used  in  one  box.  Because  there  are  thousands  of  servers,  it  is  a  prudent  purchase  that  pro¬ 
vides  for  future  expandability.  Bringing  the  processing  power/speed  and  reliability  of  a  new  serv¬ 
er  will  have  an  immediate  positive  impact  on  productivity  and  boost  morale  as  a  major  change 
has  occurred. This  process  change  can  be  operational  within  a  few  months.  Emulation  software 
can  connect  the  new  hardware  technology  to  the  old  ERP  software  system. 

Second,  I  would  consolidate  the  servers  and  operating  systems,  again  using  blade  technology 


BYSANDRAG1TTLEN 

To  say  IT  is  a  constant  challenge  is  an  understatement.  Even  the  most  scheduled 
of  tasks  can  be  a  test  of  leadership.  What  sets  good  IT  executives  apart  from  great 
ones  is  how  they  identify  and,  utlimately,  solve  problems.  Three  IT  veterans  — 
Rusty  Bruns,  CIO  at  Charleston  Southern  University  in  Charleston,  S.C.;  Jaime  Man, 
IT  director  at  Health  Care  Excel  in  Indianapolis;  and  Bill  Randall,  IT  director  at 
Red  Robin  Gourmet  Burgers  in  Denver  —  tell  us  how  theyd  handle  a  few  hypo¬ 
thetical,  hairy  situations.  Weighing  in  on  how  their  answers  measure  up  is  industry 
expert  JohnaTill  Johnson,  co-founder  of 
Nemertes  Research. 


You've  been  hired  to  overhaul  an  aging  infrastructure:  poorly  performing  mainframe  and  client/server 
applications,  a  routed  network,  a  decade-old  PBX,  dial-up  remote  access  and  a  frame-relay  WAN  with 
poor  disaster  recovery  -  generally  1980s  technology  everywhere  you  look.  Over  the  years,  business 
managers  have  built  many  workgroup  LANs,  so  the  company  also  owns  thousands  of  servers  on  varying 

«">*»•>■  WHAT  WOULD  YOU  TACKLE  FIRST,  AND  WHY? 
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This  allows  for  a  large-scale,  consolidated  production  serv¬ 
er  environment.  The  company  would  be  able  to  use, 
depending  on  the  age  of  the  existing  servers,  approxi¬ 
mately  80%  to  90%  fewer  machines  and  make  better  use 
of  underutilized  processing  power.  With  this  in  place,  I 
would  implement  a  storage-area  network  to  take  advan¬ 
tage  of  the  benefits  of  centralizing  storage. Where  possible, 
I  would  standardize  all  desktops  to  one  Windows-based 
operating  system. This  would  ease  the  support  burden  for 
the  help  desk  and  support  staff  as  well  as  the  user.  I 
would  move  the  workgroup  LANs  into  a  centrally  man¬ 
aged  directory  service-enabled  network  to  reduce 
management  costs  and  ease  maintenance  of  user  and 
computer  accounts.  It  also  would  allow  the  standard¬ 
ization  of  user  names  and  e-mail  addresses. 

Finally,  1  would  upgrade  the  network.  High-speed 
switches  and  routers  on  the  WAN  provide  as  much 
speed  as  possible  to  the  infrastructure  that  was 
replaced  or  upgraded  in  steps  one  and  two.  One  must 
ensure  that  the  bandwidth  is  increased  to  take  full 
advantage  of  the  improvements. Without  this  final  step, 
you’re  putting  a  garden  hose  on  a  fire  hydrant. 

Man:  1  would  interview  man¬ 
agement  to  gain  a  perspective  on 
its  perceived  needs  from  an  IT 
point  of  view.  I  would  then  per¬ 
form  a  technology  review  to  get 
a  feel  for  the  current  operating 
environment.  I’d  use  this  infor¬ 
mation  to  prioritize  what  could  bring  immediate  relief 
and  develop  a  technology  road  map  for  future 
changes. 

First,  I  would  address  the  network  infrastructure.  I’d 
upgrade  the  frame-relay  links  and  the  old  networking 
gear,  and  simultaneously  move  toward  VoIP  for  the 


phone  solution.  Next,  I  would  tackle  the  number  of 
workgroup  LANs.  1  would  look  at  consolidating  and 
standardizing  the  servers  into  centralized  locations 
and  would  take  advantage  of  blade  technology  and 
virtualization.  The  last  problem  to  address  would  be 
the  mainframe,  by  perhaps  building  a  migration  strate¬ 
gy  away  from  it. 


Randall:  I  would  address 
areas  where  we  could  quickly 
demonstrate  improvements  in 
usability  and  functionality.  I’d 
find  areas  that  would  have  a  sig¬ 
nificant  positive  impact  on  the 
user  base,  by  increasing  produc¬ 
tivity,  and  that  would  create  an  environment  where 
users  view  IT  as  an  advocate. 

For  example,  I’d  replace  the  voice  PBX  with  VoIP 
because  it’s  a  proven  technology  that  has  high  accep¬ 
tance  from  the  user  community.  A  VoIP  solution  could 
easily  be  architected  to  roll  out  across  the  enterprise  as 
the  infrastructure  and  resources  become  available. 
Highly  visible,  it  would  help  create  user  trust  and 
acceptance  of  IT-based  changes. 

Simultaneously  I’d  update  network  infrastructure  to 
provide  the  backbone  forVoIPThis  could  be  accom¬ 
plished  without  impacting  legacy  applications.  This 
new  switched  network  environment  could  then  be 
used  as  the  starting  point  to  consolidate  workgroup 
LANs.  By  rolling  this  together  with  the  VoIP  implemen¬ 
tation,  it  does  not  come  across  as  an  expensive  tech 
project  that  has  no  immediate  impact  for  the  user 
community. 

Finally,  I’d  replace  the  dial-up  and  frame-relay  setup 


with  newer,  faster  telecom  options, 
such  as  MPLS  or  integrated  circuits. 

Either  would  provide  increased  relia¬ 
bility,  redundancy  and  improved 
speeds, as  well  as  recoverability,  increased  security  and 
accessibility  for  users  across  the  enterprise.  This  likely 
could  be  accomplished  at  a  cost  savings,  demonstrat¬ 
ing  that  IT  can  contribute  to  the  bottom  line  while 
improving  the  quality  of  the  operations. 


Johnson:  You  really  want  to 
understand  the  critical  issues 
here.  If  you  have  a  mismatch 
between  the  head  of  strategy  who 
is  tying  the  vision  to  the  corporate 
goal  and  the  IT  manager,  you’re 
going  to  make  the  wrong  deci¬ 
sion.  You  may  have  an  unlimited  budget,  but  you  won’t 
know  what  to  do  first  unless  you  truly  understand  the 
goal.  I  agree  that  you  should  talk  to  management.  And 
your  priority  should  be  to  start  out  with  infrastructure. 
You  cannot  roll  out  VoIP  across  an  aging  infrastructure 
and  make  it  work.  Instead,  start  by  upgrading  to  MPLS. 

Go  slow  on  VoIP  as  vendors  are  ramping  up  the  matu¬ 
rity  curve  on  how  they  offer  it  to  you,  and  your  options 
will  increase  throughout  2006  and  2007.  If  you  rush  in 
today  you’ll  miss  out  on  enhancements  coming  down 
the  pike. 

Focus  on  the  mainframe  and  move  to  a  service-orient¬ 
ed  architecture.  Mainframe  and  client  let  you  leapfrog  to 
the  next  generation  without  a  middle  tier  of  aging  appli¬ 
cations.  Open  source  and  Web  services  are  accelerating 
so  quickly  you  can  do  something  in  two  weeks  that  used 
to  take  you  two  years  with  minimum  of  impact  on  users. 


♦CHALLENGE  2 


r 


Your  managed  service  provider  has  declared  that  it  is  beginning  a  bankruptcy  proceeding 
that  could  last  18  months.  You  have  one  year  left  on  a  five-year  contract.  Overall,  you’ve  been  happy  with  the  service  but 
had  been  exploring  other  providers  as  a  way  of  moving  beyond  your  current  break/fix  and  monitoring  scenario  and  into  more 
advanced  services  such  as  preventive  maintenance  and  managed  security.  The  provider  offers  to  do  these  tasks  at  cut-rate 
prices  -  half  as  expensive  as  your  other  bidders.  WOULD  YOU  STAY  OR  WOULD  YOU  GOP 


Bruns:  This  is  a  question  of  trust.  Who  have  you  been  working  with  at  the  affected  vendor  and 
will  this  person  stay  as  the  time  draws  closer  to  bankruptcy  or  once  the  company  is  out  of  bank¬ 
ruptcy?  With  proceedings  starting  and  cash  flow  significantly  decreased,  will  the  vendor  be  able  to 
meet  my  organization’s  needs?  Eighteen  months  is  an  eternity  in  the  technology  arena.This  would 
be  the  time  to  get  the  legal  department  involved  in  revoking  the  old  contract  and  writing  a  new 
contract.  I  would  attempt  to  take  advantage  of  the  lower  costs  while  exploring  other  options  in  case 
the  company  is  not  able  to  recover  from  the  bankruptcy  proceedings.  I  also  would  position  my  com¬ 
pany  to  quickly  move  my  data  to  another  provider  in  case  the  current  company  folds.  Or,  I’d  take 
the  service  in-house,  at  least  on  a  temporary  basis,  until  a  new  contract  can  be  negotiated. 


Man:  I  would  move  our  environment  to  a  stable  provider,  as  I’d  want  to  know  that  our  service 
would  not  be  interrupted  because  of  the  vendor’s  financial  uncertainty.  I  base  this  on  experience. 
A  few  years  ago,  1  worked  for  a  company  that  used  a  colocation  firm  for  its  production  environ¬ 
ment. The  firm  filed  for  bankruptcy  and  told  us  we  had  60  days  to  find  another  provider.  Finding 
another  provider  in  town  took  10  days.  Shortly  thereafter,  we  received  another  notification  saying 
we  only  had  30  days  to  move  our  production  equipment.  We  developed  a  plan,  purchased  new 
hardware,  and  moved  all  of  our  equipment  over  a  three-day  weekend  —  operating  in  disaster 
mode  due  to  the  circumstances. 

Randall:  I’d  evaluate  a  number  of  factors.  Having  a  base  of  four  years  of  satisfactory  service 
would  be  a  prime  factor.  I’d  also  consider  communication  from  our  vendor  partner.  I’d  strive  to 
ensure  that  the  decision  for  the  next  level  of  service  for  our  managed  services  was  based  on  the 
quality,  reliability  and  availability  of  the  services,  not  just  an  opportunity  to  obtain  cut-rate  pricing. 

I’d  request  an  open  dialogue  with  our  partner  to  understand  the  nature  of  the  bankruptcy  pro- 

See  Challenge,  page  48 
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IBM  TotalStorage 


INTRODUCING 

FORWARD-LOOKING  BACKUP. 


As  your  business  changes  over  time,  you’ll  face  unforeseen  challenges.  Meet  them 
head-on  with  the  IBM  TS3100  Tape  Library  Express.  Highly  compatible,  it’s  designed 
to  support  a  wide  range  of  I.T.  server  environments  -  helping  you  prepare  for  whatever 
tomorrow  brings. 

With  IBM,  innovation  comes  standard.  In  fact,  IBM  has  been 
awarded  more  U.S.  patents  than  any  other  company  for  over 
13  years.  Because  we’re  always  looking  ahead. 

IBM  System  Storage™  TS3100  Tape  Library  Express 


High  density  and  high  performance  in  a  rack  environment. 


From 


$9,750 


IBM  Financing  Advantage  only  $264/monfh' 


22  data  cartridge  capacity 

Ultrium™  3  tape  drive  supporting  up  to  400GB  of  data  on  a  single  cartridge 
(up  to  800GB  using  2:1  compression)2 

Read/write  compatible  with  media  written  by  Ultrium  2  drives;  read  compatible 
with  media  written  by  Ultrium  1  drives 
Remote  management  capability  and  bar  code  reader  standard 
Limited  warranty:  3  years  on-site3 


FINALLY,  A  CATALOG  THAT’S 
UP-TO-DATE. 

Download  the  IBM  Express  Servers  and 
Storage ™  eCatalog.  You’ll  have  access  to 
the  latest  IBM  Express  products,  including 
the  most  up-to-date  specs,  prices  and 
promotions. 

IBM  TotalStorage  SAN  16B-2  Express 

High-performance  fabric  switch  for  Windows? 

UNIX8  and  Linux8 

IBM  TotalStorage  DS4300  Express 

4.2TB  with  1  controller;  16.8TB  with  22 

Support  for  RAID  O/f/3/5/10 

512MB  cache 

1  or  2  Fibre  Channel  links  to  a  disk 
storage  array  or  an  LTO™  tape  drive 

Scales  to  33.6TB  of  Fibre  Channel  disk2 

8-port  solution  designed  to  support  up  to  7  servers 
with  a  single  path  to  disk  or  tape 

Limited  warranty:  3  years  on-site3 

Ports  on  Demand  feature:  allows  a  base  switch  to 
grow  to  16  ports 

From  $7,790* 

IBM  Financing  Advantage 

Only  $211 /month’ 

ibm.com/ 

Limited  warranty:  1  year  CRU  (customer  replacement 
unit)  and  on-site3 

systems/ in  novate50 

1  866-872-3902 

mention  104CE21A 

From  $3,170* 

IBM  Financing  Advantage 

Only  $86/month’ 

•All  prices  are  IBM's  estimated  retail  selling  prices  as  of  June  26, 2006.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary  Products  are  subject  to  availability.  This  document  was  developed  lor  offerings 
in  the  United  Stales.  IBM  may  not  Oder  the  products,  features,  or  services  discussed  in  tnis  document  in  other  countries.  Prices  subject  to  change  without  notice.  Contact  your  IBM  representative  or  IBM  Business  Partner  for  the  most  current  pricing  in  your 
geography.  1.  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  States  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  government  customers.  Monthly  payments  provided  are  for  planning 
purposes  only  and  may  vary  based  on  your  credit  and  other  factors.  Lease  Oder  provided  is  based  on  a  FMV  lease  ol  36  monthly  payments.  Other  restrictions  may  apply.  Rates  and  oderings  are  subject  to  change,  extension  or  withdrawal  without  notice 
2  GB.1,000,000,000  bytes  wtien  referring  to  storage  rapacity.  Denotes  raw  storage  capacity.  Usable  storage  capacity  may  be  less  than  stated.  Capacity  stated  in  uncompressed  merle  tallowed  by  capacity  using  data  compression  technology.  3.  IBM  hafckviro 
products  are  manufactured  from  new  parts,  or  new  and  serviceable  used  parts.  Regardless,  our  warranty  terms  apply.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor.  IBM  will  attempt  to  diagnose  and  resolve  die  problem  remote: y 
before  sending  a  technician.  On-site  warranty  is  available  only  for  selected  components.  IBM,  the  IBM  logo,  System  Storage,  TotalStorage  and  Express  Servers  and  Storage  aretrademarte  or  registered  trademarks  of  International  Business  Machines  Cov,  M-ion 
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ceeding.  Many  times,  the  business  envi¬ 
ronment  can  change  more  rapidly  than 
the  business  can  adapt.  The  ability  for 
the  vendor  partner  to  continue  to  have 
positive  cash  flow  during  the  bankrupt¬ 
cy  proceeding  would  be  a  prime  con¬ 
sideration  in  our  decision.  Based  on  the 
quality  of  our  relationship  and  our  per¬ 
ception  of  its  ability  to  emerge  from 
bankruptcy,  I’d  start  to  move  forward  in 
evaluating  the  solutions  that  would  best 
meet  our  needs  for  preventive  mainte¬ 
nance  and  security. 

I’d  complete  our  due  diligence,  then 
evaluate  the  offerings  of  the  competitors 
to  determine  what  the  best  solution  for 
our  environment  would  be,  taking  into 
account  service  levels,  customer  refer¬ 
rals,  real-world  testing,  technical  exper¬ 


tise,  pricing  value  and  compatibility 
with  our  existing  solutions. The  technol¬ 
ogy  solution  that  provides  the  best  fit  is 
seldom  the  least  or  most  expensive,  so 
cut-rate  pricing  typically  is  an  indicator 
of  compensation  for  a  deficiency. 

I’d  also  review  the  contracts  for  bank¬ 
ruptcy  clauses  that  would  allow  for  an 
early  out,  or  explore  creative  solutions 
that  may  be  able  to  provide  us  with 
additional  protection  if  the  bankruptcy 
eventually  leads  to  the  partner’s  failure. 


These  types  of  solutions  may  provide 
adequate  protection  to  offset  the  addi¬ 
tional  risk  incurred,  while  taking  advan¬ 
tage  of  the  availability  to  the  pricing 
opportunity. 

Johnson:  Everyone  brings  up  excel¬ 
lent  points.  However,  any  time  you  enter 
into  a  contract  with  a  vendor,  you 
should  have  a  merger/acquisition/ 
divestiture  clause  to  protect  you  from 
vendor  changes  such  as  bankruptcy. This 


doesn’t  mean  you  won’t  stick  with  the 
bankruptcy  vendor,  but  it  allows  you  to 
trigger  the  RFP  process.  Financial  viabil¬ 
ity  is  a  critical  success  factor. You  have  to 
consider  some  things:  Has  the  board 
expressed  a  high  level  of  commitment? 
Do  you  trust  that  they’ll  come  out  of 
this?  You  want  to  compare  and  contrast 
this  information  with  other  vendors 
that  might  be  in  better  shape. 
Remember  this  best  practice:  The  best 
technology  is  no  good  if  it  goes  away. 


| - ’ - 

Your  CEO  is  knee-deep  in  plans  to  acquire  a  competitor  and  he’s 
made  it  clear  he’s  ready  to  go  through  with  the  deal  at  virtually  any  cost.  You've  been  tasked  with 
analyzing  the  target  firm's  IT  network  and  security  operations,  and  find  them  a  mess.  You  even 
suspect  that  the  company  has  recently  suffered  a  security  breach  and  that  confidential  customer 
data  may  have  been  exposed.  To  your  knowledge,  the  company  has  neither  disclosed  the  breach  as 
part  of  the  acquisition  discussions  nor  revealed  it  to  customers  or  the  authorities. 

WHAT  DO  YOU  DO? 


♦CHALLENGE  3 


Bruns:  Don’t  expect  assistance  or 
honesty  from  the  target  company. 
Instead,  1  would  inform  the  CEO  and 
board  members  of  the  potential  breach 
and  involve  legal  counsel  to  ensure  that 
my  CEO  and  those  involved  understand 
the  litigation  potential  caused  by  the 
breach. 

Additionally,  I  would  provide  quantifi¬ 
able,  indisputable  data  in  writing  sup¬ 
porting  the  claim  of  the  breach.  I  would 
keep  a  few  copies  of  the  report  for 
myself.  At  times  —  as  we  continually  see 
in  the  news  —  CEOs  and  other  execu¬ 
tives  may  not  always  listen  to  the  logical 
option. 

If  my  organization  continued  with  the 
acquisition,  I  would  contract  with  a  rep¬ 
utable  independent  security  company  to 
investigate  whether  a  security  breach  did 
take  place  and  to  what  extent  customer 
data  was  compromised.  If  the  firm  deter¬ 
mines  a  breach  did  occur,  I  would  return 
to  the  CEO  and  board  members  and 
make  them  aware  of  the  severity  of  the 
situation  with  a  detailed  report  from  the 
security  firm. 

Man:  1  would  bring  the  poor  condition 
of  the  IT  network  and  security  operations 
to  the  CEO’s  attention.  I  would  provide  an 
in-depth  analysis  of  why  the  situation 
occurred  and  suggestions  for  rectifying 
it.  1  would  then  discuss  the  security 
breach,  which  to  me  is  an  ethics  issue.  It 
seems  the  company  being  acquired  is 
not  acting  in  good  faith.  1  would  have  to 
understand  the  reasons  as  to  why  the 


incident  has  or  has  not  been  reported  to 
the  appropriate  authorities  or  communi¬ 
cated  to  the  customers  affected. 

Randall:  This  could  be  an  indicator 
that  further  due  diligence  is  required.The 
suspected  security  breach  is  a  major 
facet  that  will  need  to  be  factored  into 
the  acquisition  discussions. The  possible 
exposure  of  confidential  customer  data 
could  be  very  damaging-  in  terms  of 
financial  and  public  relations  —  even 
though  the  breach  took  place  before  any 
acquisition. 

I’d  also  want  to  make  sure  there  are  no 
other  surprises  on  the  horizon. There  are 
two  possible  scenarios  to  consider.  The 
first  is  that  the  company  was  aware  of  a 
security  breach  and  either  failed  to  com¬ 
municate  it  or  attempted  to  conceal  it. 
The  other  is  that  the  security  procedures 
in  place  were  so  poor  that  they  were  un¬ 
aware  of  the  breach  and  the  impact  that 
the  loss  of  confidential  customer  data 
would  create. 

Our  research  would  determine  the 
estimated  cost  associated  with  the 
cleanup  of  the  security  breach  and  then 
I’d  suggest  factoring  that  into  the  acqui¬ 
sition  deal.  1  would  compare  the  impact 
of  such  financial  and  public  relations 
situations  had  on  other  companies  and 
communicate  these  findings  to  the  CEO 
and  the  board. 

Johnson:  The  most  important  thing 
to  remember  is  that  this  is  not  specifical¬ 
ly  an  IT  issue.  It’s  a  liability  issue.  You 


should  definitely  not  expect  any  assis¬ 
tance  from  the  target  company  This  may 
be  because  it  is  a  competitor  that  can’t 
legally  divulge  information.  You  should 
go  to  the  lawyers  —  not  just  the  CEO. You 
have  to  make  it  clear  to  the  CEO,  the 
board  and  corporate  counsel  that  there 
is  liability  if  the  deal  goes  through.  And 
definitely  keep  copies  of  paperwork 
yourself. 

If  the  CEO  asks  what  to  do,  recommend 
a  third-party  evaluation  as  a  contingency 
of  the  deal.  Even  if  the  target  company 
pays  for  the  evaluation,  it  shouldn’t  be 


able  to  see  the  results.  Then  the  legal 
team  should  develop  language  that  states 
if  the  breach  is  found  to  be  true,  here  are 
the  penalties;  if  the  customer  data  has 
been  compromised  or  if  the  stock  price 
declines,  the  deal  is  off. 

Treat  this  situation  with  all  the  serious¬ 
ness  it  deserves.  No  matter  what  happens, 
it  may  be  career-limiting  or  worse,  career¬ 
ending,  so  make  sure  you  document 
everything. 

Gittlen  is  a  freelance  technology  writer. 
She  can  be  reached  at  sgittlen@charter.net. 
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Assure  flawless  information  hand-offs  and  make  your  systems  collaborate  the  way  75%  of  the  FORTUNE®  100  do. 

If  your  company  depends  on  partners  outside  your  control,  you  should  depend  on  Sterling  Commerce.  Only 
Sterling  Commerce  Multi-Enterprise  Collaboration  (MEC)  solutions  allow  you  to  optimize  communities,  pro¬ 
cesses  and  technology.  So  you  can  leverage  your  current  assets  with  configurable  software  and  services 
built  on  a  services-oriented  architecture,  ready  for  implementation  right  now.  You  get  visibility  into  your  entire 
value  chain  and  increased  control  moving  forward.  With  over  30,000  customers  worldwide,  we're  sure  to  have 
a  solution  that  pleases  you... and  your  customers.  Visit  us  at  www.sterlingcommerce.com 
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[all  over  the  company] 


Dennis  Smith, 

manager  of  infrastructure 
engineering,  Mellon  Financial 


*  Three  IT  executives  share  advice  ton  crafting  visionary  sbrabegic  plans. 


would  assist  the  airline  in  nudging 
online  bookings  from  30%  of  revenue 
today  to  50%  by  next  year  and  ulti¬ 
mately  to  60%,  he  says.  With  that  in 
mind,  Rapp  chose  Sun’s  Java  Platform, 
Enterprise  Edition,  the  Solaris  10  oper¬ 
ating  system  and  Opteron-based  Sun 
Fire  servers,  and  began  rolling  out 
advanced  functionality  on  the  site. 

Heads-up  knowledge 

No  plan  will  succeed  if  it  doesn’t  take 
into  account  what’s  going  on  with  the 
business  at  a  day-to-day  operational 
level.  But  truly  knowing  is  different  from 
simply  thinking  you  know.  Keeping  your 
fingers  on  the  pulse  of  the  business 
requires  developing  a  network  of  inter¬ 
nal  contacts  —  dozens  of  people  across 
all  corporate  levels  and  lines  of  busi¬ 
ness,  says  Dennis  Smith,  first  vice  presi¬ 


dent  and  manager  of  infrastructure  engi¬ 
neering  at  global  financial  services 
company  Mellon  Financial,  in  Pitts¬ 
burgh. “You  just  can’t  focus  in  on  execu¬ 
tives  or  you’re  going  to  end  up  missing 
major  points.  It’s  important  to  spread  out 
and  talk  to  folks”  all  over  the  company, 
he  emphasizes. 

By  keeping  in  touch  with  people  in 
Mellon’s  Private  Wealth  Management 
line  of  business,  for  example,  Smith  says 
he  got  early  notice  that  the  unit  was 
working  on  a  new  CRM  application.  He 
knew  this  would  be  a  dense  application 
and  could  suffer  performance  hits 
across  the  WAN. The  time-tested  strategy 
was  adding  bandwidth,  he  says.  But 
because  he’d  been  talking  to  his  exter¬ 
nal  sources  as  well  —  vendors  and 
peers  within  the  financial  services 
See  Strategy,  page  52 
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trategic  planning  —  love  it  or  hate  it  —  is 
part  of  your  job.  Once  a  year,  or  maybe  as 
often  as  every  quarter,  you  are  called  to 
predict  the  future  and  think  big.  Do  this 
well  and  you  will  increase  your  company’s 
competitive  advantage,  bringing  yourself  and  your  team 
the  accolades  (and  budgets)  you  deserve.  v  ^  v 


That,  of  course,  is  easier  said  than 
done.  You  know  the  basics  —  making 
sure  your  plan  relates  to  business 
objectives;  keeping  your  technology 
picks  within  justifiable  budgets;  period¬ 
ically  assessing  the  validity  of  your  plan 
.gainst  current  business  conditions. 
But  beyond  these,  what  distinguishes 
truly  exceptional  IT  strategic  planners 
from  the  rest? 

A  great  strategic  planner  needs  to  be 
a  bit  of  a  visionary,  in  terms  of  under¬ 


standing  what’s  possible  —  then  have  a 
good  business  aptitude  to  translate  that 
into  what  can  accrue  a  desired  busi¬ 
ness  outcome,”  says  Bob  Rapp,  who  as 
CIO  is  the  chief  IT  strategist  for  low-cost 
air  carrier  Frontier  Airlines,  in  Denver. 

For  instance,  when  Frontier  estab¬ 
lished  an  aggressive  business  objective 
of  increasing  online  bookings,  Rapp 
knew  moving  to  an  open,  scalable  Web 
architecture  would  help  pave  the  way.  A 
more  usable,  flexible  and  scalable  site 


With  shrinking  backup,  recovery  and  archive  windows,  most  IT  Professionals  protect  their  data  after  normal 
business  hours  and  on  weekends  -  the  times  when  you  would  rather  not  sit  around  watching  a  tape  library. 
Our  PX500  Series  redefines  value  in  rackmount  tape  automation  with  enterprise-class  features,  high  density 
and  market-leading  investment  protection.  And  our  superior  performance,  reliability  and  support  allow  you 
to  have  a  normal  life  -  with  vacations.  To  find  out  how  Quantum's  got  you  covered  with  our  new  PX500  Series, 
call  866-827-1500  or  visit  us  at  www.quantum.com. 
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industry  —  he  realized  that  another 
technology  option,  namely  wide-area 
file  services  (WAFS),  could  work 
instead,  he  says. 

“This  was  a  matter  of  us  looking  at  the 
technology  and  saying, ‘Hey,  this  market 
is  starting  to  become  much  more 
mature  so  let’s  alter  our  plan  and  look  at 
these  [WAFS]  appliances,”’ he  says. 

Mellon  tested  a  few  WAFS  products, 
locked  into  a  vendor  and  began  testing 
it  with  two  of  the  roughly  40  Private 
Wealth  Management  branches.  “Users 
have  been  ecstatic,”  Smith  says,  and 
Mellon  is  working  on  rolling  out  the 
WAFS  product  to  each  of  the  unit’s 
branch  offices.  Plus,  he  adds,  Mellon 
now  has  a  product  capable  of  not  just 
optimizing  WAN  performance  but  also 
centralizing  customer  data  —  a  big 
push  in  today’s  highly  regulated  finan¬ 
cial  services  firms. 

Studying  up  on  vendors  and  their 
technology  plans  is  an  important  job 
for  strategic  planners,  too,  says  Barry 
Strasnick,  CIO  at  CitiStreet,  a  global 
insurance  benefits  provider  in  Quincy, 


Mass.  “We  want  to  be  comfortable  that 
the  entity  offering  us  the  technology 
has  a  viable  business  model  for  that 
product,”  he  says. 

He  cites  two  examples  in  which 
CitiStreet’s  get-to-know-your-vendor 
process  has  pushed  IT  strategists  to 
select  products  against  the  tide.  In  the 
first  case,  they  chose  the  open  source 
JBoss  Application  Server  over  a  higher- 
cost,  better-known  product  —  BEA 
Systems’  WebLogic.  In  the  second 
instance,  they  picked  a  relatively  no¬ 
name  WAN  acceleration  product,  from 
Swan  Labs  (since  acquired  by  F5 
Networks),  over  other  approaches  from 
larger  vendors.“It  made  sense  that  WAN 
acceleration,  including  full  encryption, 
using  excellent  software  on  cost-effec¬ 
tive  Linux  appliances,  would  be  a  viable 
long-term  capability  he  says. 

Cutting  your  losses 

One  critical,  but  often  overlooked, job 
of  strategic  planners  is  knowing  when 
to  ditch  the  plan  —  or  even  the  tech¬ 
nology.  This  can  sometimes  be  the  best 


option  if  users  aren’t  embracing  the 
technology  your  plan  says  would  be 
perfect;  otherwise  you’re  taking  on  an 
unacceptable  level  of  risk,  Frontier’s 
Rapp  says.  “You  may  have  done  a 
strategic  plan  in  partnership  with  a 
business  unit.  But  ...  if  you  detect  user 
disinterest,  it’s  best  to  depart  the  pro¬ 
ject,”  he  says. 

Likewise,  being  a  great  strategic  plan¬ 
ner  means  being  able  to  distinguish 
between  the  desired  and  the  doable, 
Strasnick  says.  “Just  because  a  project 
is  important  and  desirable  doesn’t 
mean  it’s  realistic,”  he  says.  “We  defi¬ 
nitely  have  a  can-do  attitude  within 
CitiStreet  IT,  but  we  also  make  sure  it  is 
a  realistic  and  prudent  one  for  the 
company  in  total.” 

Strasnick  favors  an  approach  he  calls 
aggressive  evolution,  which  means  no 
IT  strategic  plan  should  require  “one 
monstrous,  long-running  project  to 
achieve  success.”  Instead,  he  suggests, 
the  plan  should  incorporate  a  series  of 
six-month  deliverables. 

Lastly,  Strasnick  says,  strategic  plan¬ 


ners  never  rest.  Days  set 
aside  specifically  for  strate¬ 
gic  planning  are  impor¬ 
tant,  but  you  really  should 
never  stop  strategizing,  he  says,  adding, 
“that’s  what  driving  to  and  from  work, 
nights  and  weekends  are  for  —  part  of 
being  a  senior  executive  is  that  you  are 
contemplating  how  to  improve  your 
business  outside  of  work  hours  more 
often  than  not.” 

That’s  certainly  true  at  Mellon. 
Because  of  his  hectic  schedule,  Smith 
says  he’s  gotten  in  the  habit  of  having 
vendors  come  in  at  5  p.m.to  talk  tech¬ 
nology  over  a  working  dinner.  This  he 
usually  does  three  times  a  week,  he 
says.“I  need  their  input  because  I  main¬ 
tain  a  three-  to  five-year  plan  for  each 
of  the  technology  products  within  my 
area  —  in  terms  of  what  version,  which 
features,  which  product  sets,  what  ven¬ 
dors.  I  update  the  plan  yearlyf  he  says. 

Clearly,  your  role  as  strategic  planner 
has  no  limits.  And  mixing  up  the  right 
amount  of  vision  and  execution  can 
turn  your  plans  into  gold.  ■ 


IT  supports  and  controls  the 
applications  that  run  the  business. 

Now  there's  an  application  to  support 
and  control  the  business  of  IT. 

Maximo®  ITSM,  the  most  comprehensive  IT  asset  and  service 
management  solution,  substantially  improves  the  business  of  IT, 
significantly  increasing  the  value  IT  brings  to  an  organization.  By 
unifying  IT  service,  asset  and  work  management  on  a  single 
software  platform,  Maximo  ITSM  delivers  the  control  and  visibility 
you  need  to  align  IT  service  levels  with  your  overall  business  goals. 
All  you  need  to  integrate  and  automate  processes,  reduce  unplanned 
outages,  standardize  and  share  information  and  surpass  service-level 
commitments.  To  make  your  IT  organization  more  efficient  and 
more  valuable,  download  our  whitepaper  at  www.maximoit.com/nw 
or  call  800-326-5765. 
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I  need  to  install  a  Cat  6  network  with  VoIP 
serving  200  drops  in  eight  weeks. 

I  need  thermal  and  cable  management  solutions 
that  fit  my  project  and  budget. 

I  need  one  source  I  know  will  deliver. 


I  need  Hoffman. 


When  you  have  a  lot  of  decisions,  there’s  one  choice  that’s  simple:  Hoffman. 

You  may  know  us  as  the  leading  choice  in  enclosure  technology.  But  do  you  know  everything  else  we  can  do?  Hoffman  offers: 

■  The  broadest  range  of  innovative  racks,  cabinets,  cabling  solutions  and  network  accessories  at  affordable  prices. 

■  A  wide  array  of  modification  options. 

■  Thermal  management  solutions  that  handle  next-generation  servers  and  networks. 

■  Answers  to  seismic  vibration,  with  cabinets  compliant  to  Telcordia  GR-63-C0RE,  NEBS™  Requirements: 

Physical  Protection  and  California  Building  Code. 

■  Improved  installations  resulting  from  versatile  cable  management  systems. 

■  EMI/RFI  shielding  for  data  reliability. 

■  Fast  ordering  and  local  availability. 

Turn  to  one  trusted  source  for  all  your  storage  and  protection  needs.  Hoffman. 


Hoffman.  What  your  work  demands. 


www.ehoffman.com 
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rank  Basso  loves  life  in  the  fast  lane. 
As  assistant  director  of  communica- 
i  tions  for  Mazda  Raceway  Laguna 
Seca,his  need  for  speed  is  amply  met.  Fast 
racetrack.  Fast  wireless  network. 

Basso,  33,  is  a  linebacker-sized  man  who 
talks  in  the  easygoing  Southern  California 
speech  of  the  Malibu  beaches  where  he 
grew  up.  But  underneath  his  laid-back 
exterior  is  a  guy  on  a  serious  mission.  He 
is  creating  a  state-of-the-art  network  that 
will  enable  a  historic  racetrack  to  carry 
on  as  an  international  venue. 

“1  came  here  during  a  race,  and  I’ ve 
been  here  ever  since,”  says  Basso,  who  is 
both  a  volunteer  and  a  paid  contractor  for 
the  track’s  management  organization,  the 
Sports  Car  Racing  Association  of  the  Mon¬ 
terey  Peninsula  (SCRAMP).  While  he 
spends  all  of  his  vacation  time  and  a  good 
chunk  of  his  weekends  helping  SCRAMP 
organize  races,  this  isn’t  his  day  job.  He 
also  is  the  director  of  operations  for  e- 
mail  security  start-up  ProofPoint. 

VoIP  in  a  hurry 

Basso’s  Laguna  Seca  story  begins  two 
years  ago,  when  SCRAMP  won  the  con¬ 
tract  to  host  the  Red  Bull  U.S.  Grand  Prix, 
billed  as  the  largest  motorcycle  race  in 
North  America.  Including  the  Grand  Prix, 
SCRAMP  runs  five  major  annual  interna¬ 
tional  events  (although  the  venue  is  rent¬ 
ed  out  year-round  to  the  Skip  Barber 
Racing  School  and  myriad  other  event 
organizers).  As  part  of  the  Grand  Prix  con¬ 
tract,  Laguna  Seca  had  to  provide  500 
phone  lines  throughout  its  542-acre  site. 
The  requirement  wasn’t  out  of  line.  But  be¬ 
cause  the  mostly  volunteer-run  SCRAMP 
had  been  operating  the  track  as  a  non¬ 
profit  since  1957,  its  network  technology 
had  fallen  dangerously  behind. 

No  matter  how  beloved  the  track, “teams 
wouldn’t  ship  $250  million  worth  of 
equipment  from  Europe  to  race  without  a 


phone,”  Basso  says.  Moreover,  network  fail¬ 
ures  during  international  races  carry  with 
them  a  painful  fine,  as  much  as  $250,000 
per  outage.  Plus  the  venue’s  archaic,  UHF 
radio  and  paper-based  systems  for  operat¬ 
ing  concessions  meant  lost  revenue  from 
the  60,000  fans  a  day 

“They  used  paper  systems  as  they  just 
did  not  have  the  technology  or  network  to 
support  anything  else.  During  events,  they 
carried  cash  registers  on  golf  carts  back  to 
the  office  to  download  daily  totals,  often 
causing  damage  or  loss  of  data,”  Basso 
recalls. 

SCRAMP  originally  asked  the  local 
RBOC  to  install  the  phone  lines.  But 
Laguna  Seca  is  located  in  relative 
nowhere,  some  10  miles  east  of  Monterey 
Calif.,  (secluded  enough  to  be  home  to  a 
250-site  campground).  The  RBOC  didn’t 
have  enough  telephone  facilities  to  provi¬ 
sion  the  lines. 

When  it  became  apparent  that  the  lines 
wouldn’t  be  installed  in  time,  one  of  the 
fiber  contractors  working  for  the  phone 
company  suggested  that  SCRAMP  contact 
Basso,  his  friend.  Basso’s  resume  consists 
of  a  string  of  complex  security  and  net¬ 
work  design  jobs.  He’s  worked  for  a  gov¬ 
ernment  contract  security  firm,  a  stream¬ 
ing  data  router  start-up,  an  ISRan  interna¬ 
tional  wireless  location-based  service 
provider  and  a  multiplayer  gaming  com¬ 
pany,  to  name  a  few. 

Basso,  a  car  racer  himself,  relished 
Laguna  Seca’s  technology  challenge  and 
his  newfound  access  to  the  world- 
famous,  2.2-mile  course.  “I’m  notorious 
for  taking  rental  cars  around  the  track,” 
he  says  with  a  grin. 

The  SCRAMP  communication  team 
knew  it  wanted  to  implement  VoIP  for  the 
needed  phone  lines. With  Basso  on  board, 
they  completed  the  project  on  time, 
installing  15  miles  of  fiber-optic  cabling, 
11  fiber  points  of  presence,  10  miles  of 
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copper  cabling  and  capacity  for  1,500 
VoIP  lines,  including  analog  adapters.  He 
brought  in  a  DS-3  microwave  backhaul 
link  from  his  former  ISP  employer,  Internet 
Connections  (where  Basso  still  serves  on 
the  board)  —  which  required  linking  to  a 
line-of-sight  dish  on  a  hillside  9  miles 
away  on  Mount  Toro.  (An  eventual  second 
circuit  will  link  the  microwave  network  to 
San  Jose,  via  a  dish  60  miles  away  at  Loma 
Prieta  Peak.)  He  scoured  the  property  for 
places  he  could  stuff  a  wiring  closet  to 
house  Cisco  routers  and  VoIP  gear,  con¬ 
verting  old  wooden  shacks  and  janitorial 
storage  units  alike. 

Even  so,  the  amount  of  work  involved  in 
setting  up  VoIP  for  each  race  is  mind-bog¬ 
gling.  Phone  lines  serve  the  racing  teams, 
the  media,  concession  stand  vendors,  hos¬ 
pitality  suites  and  anyone  else  who  needs 
a  phone  on  race  day 

But  every  event  uses  the  facility  space 
differently  —  each  a  unique  city  of 
mobile  tents  and  trailers.  Basso  cannot 
install  permanent  Ethernet  jacks,  as  ven¬ 
dors  may  wind  up  several  feet  away  from 
the  jack.  Each  race  requires  months  of 
planning.  Immediately  before  an  event,  a 
team  of  volunteers  will  spend  three  or  so 
days  building  the  network. 

“My  least  favorite  part  of  the  job  is  get¬ 
ting  ready  for  a  race  when  it’s  raining,  and 
we’re  pulling  cable  in  the  mud  to  get  to  a 
vendor,”  he  says.  “But  we’re  done  when 
race  day  starts.  We  get  to  sit  out  in  the 
communication  tower  and  watch  the 
race.”They  also  monitor  the  network  with 
tools  such  as  CiscoWorks  and  open 
source  Nagios. 


Wireless  by  design 

Comprehensive  high-speed  Internet  ac¬ 
cess  was  an  even  bigger  technical  chal¬ 
lenge  than  voice.  Basso  needed  to  cover 
the  paddock,  garages,  hospitality  suites 
and  outlying  areas.  Digging  up  the  track  to 
lay  more  fiber  wasn’t  feasible,  especially 
because  many  of  the  buildings  on-site  are 
temporary  structures.  Wireless  was  the 
obvious  solution. 

But  unlike  oval-shaped  NASCAR  tracks, 
Laguna  Seca  is  an  1 1-turn  road  course  on 
rolling  hills.  The  track  travels  under  five 
bridges  and  covers  350  feet  of  elevation 
changes.  Basso  couldn’t  just  point  all  the 
wireless  access  points  into  an  oval  center 
and  call  it  good.  With  the  help  of  a  wire¬ 
less  network  design  firm,  the  communica¬ 
tions  team  placed  access  points  in  the 
logical  spots  necessary  for  a  mesh  net¬ 
work.  But  race  cars  also  use  Wi-Fi  for  their 
onboard  telemetry  Every  time  a  car  sped 
by,  it  caused  so  much  noise  on  the  2.4GHz 
frequency  that  the  access  points  dropped 
their  Wi-Fi  connections.  Several  seconds 
were  required  for  them  to  find  their  way 
back  online,  only  to  have  another  car 
whiz  by  and  knock  them  off  again. 

“We  ended  up  with  unhappy  frustrated 
customers, vendors,  race  teams  and  media,” 
he  says  of  the  initial  wireless  network. 

Rogue  access  points  caused  another 
problem.  Every  team  would  throw  its  own 
access  point  online  for  legitimate  rea¬ 
sons,  and  then  use  it  to  steal  a  competi¬ 
tor’s  secret  telemetry  and  vehicle  configu¬ 
ration  information. 

In  search  of  a  solution  to  the  problem  of 
rogue  access  points,  Basso  contacted 
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Laguna  Seca,  continued 

Trapeze  Networks,  a  company  he 
knew  through  ProofPoint.  Using 
its  MP-620  outdoor  802.11a  and 
802.1  lb/'g  access  points,  Trapeze 
helped  Basso  design  a  pico  cell 
wireless  network.  Each  cell  cov¬ 
ers  about  a  300-foot  zone,  which 
Basso  jokes  is  what  the  original 
802.1 1  specification  supports.  By 
carefully  tilting  each  access 
point  at  the  right  angle  so  that 
the  pico  cell  did  not  fall  subject 
to  interference,  the  wireless  net¬ 
work,  which  went  live  in 
February,  has  remained  reliable. 

Trapeze  also  designed  special 
environmental  enclosures  for  its 
access  points.  For  example,  wall- 
mounted  access  points  in  the 
garages  are  enclosed  in  filtered, 
fire-resistant  boxes,  which  pro¬ 
tect  them  from  dirt,  fuel,  fumes 
and  chemicals.  All  access  points 
use  Power  over  Ethernet. 

Trapeze’s  multitenant  function 
stops  the  rogues. Teams  must  use 
the  venue’s  network.  Each  team 
receives  a  Trapeze  access  point 
and  its  own  identity  by  which  it 
safely  tunnels  through  the  wire¬ 
less  network. 

Basso  now  is  turning  his  atten¬ 
tion  to  other  technology  needs. 
This  month  his  team  brought 
online  a  point-of-sale  system  using 
Microsoft  Retail  Management 
System.Voice  over  wireless  also  is 
on  Basso’s  list. 

All  of  the  labor  has  immense 
rewards,  he  says.  “This  job  is 
instant  gratification.  We  turn  the 
network  on,  and  everything 
works  and  everyone  is  happy.  It’s 
an  environment  where  we  are 
moving  from  zero  to  Mach  1 
overnight.”  ■ 
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Watch  for  more  on 
Carnegie  Mellon's  Data  Center 
Observatory  project  in  an 
upcoming  issue  of  our  NEW 
rA  CENTER  supplement. 
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ho  needs  steel  when 
you’ve  got  storage? 
Not  Pittsburgh  trans¬ 
plant  Greg  Ganger,  that’s  for  sure. 

Ganger,  a  Carnegie  Mellon  University  lab 
director,  has  grand  plans  for  creating  high¬ 
ly  automated  and  cost-effective  ways  to 
manage  large-scale  storage  infrastructures. 
The  backdrop  for  his  research  will  be 
Carnegie  Mellon’s  new  Data  Center 
Observatory  (DCO),  the  latest  evidence 
that  high-tech  is  becoming  as  important  to 
Pittsburgh  as  steel  once  was. 

Run  by  the  university’s  Parallel  Data  Lab¬ 
oratory  (PDL),a  renowned  storage  research 
center,  the  DCO  will  serve  another  role,  too. 
Various  campus  constituencies  will  use 
DCO  computing  and  storage  resources  for 
computationally  intensive  projects.  After 
all,  says  the  affable  Ganger,  to  figure  out 
how  to  build  large-scale  self-managing  (- 
healing,  and  -tuning)  storage  systems  that 
work  for  complex,  sprawling  infra¬ 
structures,  you  need  firsthand 
access  to  such  an  environment  — 
complete  with  live  production  data. 

Bringing  in  some  university  com¬ 
puting  operations  and  creating  a 
full-blown  data  center  made  sense, 
Ganger  says.  “If  the  computational 
clusters  were  elsewhere, then  ...a  lot 
of  the  real  problems  weren’t  going 
to  show  up,”  he  explains. 

In  taking  on  responsibility  for  that 
user  environment,  Ganger  dons  a 
new  hat  —  that  of  IT  go-to  guy  He 
adds  it  to  an  impressive  existing 
array,  including  researcher,  commu¬ 
nicator,  industry  liaison, adviser,  men¬ 
tor  and  professor  (he  teaches  classes 
on  distributed  systems, operating  sys¬ 
tems  and  storage  systems).  His  first 
task  as  IT  guy  has  been  to  lobby  uni¬ 
versity  research  groups  to  forgo  run¬ 
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ning  their  own  compute  clusters  in  favor  of 
tapping  into  DCO’s  newfangled  shared 
infrastructure.  These  are  people  involved 
with  scientific  visualization, earthquake  sim¬ 
ulation,  nanotechnology  research  and  other 
big  data-mining  projects,  for  example. 

Ganger  and  the  DCO  team  are  supporting 
those  first  users  on  generic  servers  and 
storage  systems  filling  12  IT  racks  and  sit¬ 
ting  in  their  own  enclosure  along  with  the 
necessary  power  and  cooling  systems 
(from  American  Power  Conversion).  Over 
the  next  three  years,  the  team  will  add  three 
enclosures  to  the  DCO,  bringing  the  num¬ 
ber  of  IT  racks  to  40.  Ganger  expects  to  then 
be  supporting  more  than  a  petabyte  of  stor¬ 
age  and  4,000  GHz  of  processing  power  for 
the  university  constituents.  The  IT  systems 
will  consume  774  kilowatts  of  energy. 
Ganger  equates  that  to  the  rate  of  con¬ 
sumption  of  750  average-sized  homes. 

During  the  recent  grand  opening,  Ganger 
proudly  showed  off  the  DCO,  the  culmina¬ 
tion  of  many  years  of  storage  research. 

Ganger,  an  35-year-old  who  hails  from  the 
Midwest,  earned  a  slew  of  engineering 
degrees,  including  a  Ph.D.at  the  University 


of  Michigan.  Then  he  headed  to  the  Mass¬ 
achusetts  Institute  of  Technology,  where  he 
spent  two  and  a  half  years  working  as  a 
postdoctorate  associate.  He  specialized  in 
research  on  storage  systems  and  infrastruc¬ 
ture,  occasionally  working  with  advanced 
development  groups  at  various  compa¬ 
nies.  In  1997,  lured  by  the  PDL’s  reputation 
as  a  premier  storage  research  center,  he 
came  to  Carnegie  Mellon. 

Ganger, his  wife  and  two  young  sons  live  a 
half  mile  away  from  campus,  an  easy  com¬ 
mute  for  a  guy  who  typically  works  60 
hours  a  week  and  often  finds  himself  in  the 
lab  at  night  or  on  weekends.  But  don’t  ex¬ 
pect  to  find  Ganger  around  the  DCO  in  the 
early  evening  —  that’s  family  time,  he  says. 
“From  about  5:45  to  8  p.m.,  I  don’t  exist  as 
far  as  anybody  here  is  concerned,  because 
that’s  when  I’m  at  home  and  having  dinner 
with  the  kids,  playing  in  the  backyard  and 
things  like  that. . .  .That’s  inviolate.” 

Back  at  Carnegie  Mellon,  users  will  no 
doubt  benefit  from  his  passion  and  vision. 
So,  too,  will  storage  vendors  and  enterprise 
IT  executives  across  the  country  ■ 
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iage  facilities,  but  Ramos 
has  final  say  over  most 
technology  matters. 
Ramos,  who  has  a  staff 


had  his  team 
bury  a  fiber  ring 
around  the  lake 
at  the  complex’s 
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First  Tee,  an  organi¬ 
zation  focused  on 
teaching  kids 
lessons  in  leadership  and  integrity 
through  golf,  one  would  think  the  day  is 
filled  with  thoughts  of  drivers,  pitching 
wedges  and  putters.  But  the  chief  con¬ 
cern  of  IS  Director  Raul  Ramos  is  net¬ 
work  security,  redundancy  and  reliability 
First  Tee,  an  arm  of  the  PGAs  World  Golf 
Foundation,  is  at  the  World  Golf  Village,  in 
St.  Augustine,  Fla.  The  village  also  houses 
golf’s  Hall  of  Fame,  hotels  and  housing 
developments,  all  surrounded  by  lush 
golf  courses.  Ramos  landed  at  the  World 
Golf  Foundation  as  employee  No.  1 1  nine 
years  ago,  when  the  village  was  just  taking 
shape.  He  helped  build  the  network 
infrastructure  for  the  Hall  of  Fame  and 
other  village  facilities,  leveraging  20  years 
of  experience  planning  and  implement¬ 
ing  technology  projects  for  the  Air  Force 
(including  for  NASA,  on  contract  jobs 
that  frequently  brought  him  to  Florida). 

Four  years  ago,  Ramos  moved  to  First 
Tee  to  help  get  its  IT  infrastructure  off 
the  ground.  Some  common 
infrastructure  —  such  asT- 
s  for  Internet  access  — 
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of  three  and  is  looking  for  a  fourth,  sup¬ 
ports  45  employees  in  the  main  office, 
plus  six  regional  managers  around  the 
country  He’s  a  jack-of-all-trades,  oversee¬ 
ing  development  of  a  variety  of  efforts,  in¬ 
cluding  an  automated  backup  and  recov¬ 
ery  system,  an  online  database  for  track¬ 
ing  program  participants  in  the  organiza¬ 
tion’s  200-plus  chapters  and  a  Gigabit 
Ethernet-capable  network. 

An  eye  on  the  future 

Always  looking  forward,  Ramos  says  he 
made  First  Tee  wire  its  office  for  Gigabit 
Ethernet  during  construction  even 
though  it  didn’t  have  a  Gigabit  router  or 
switch  at  the  time. “We  did  the  wiring  for 
it  then, so  that  when  the  other  technology 
[routers,  switches,  network  interface 
cards]  came  down  in 
price,  we’d  be  able  to 
upgrade  without  re¬ 
wiring,"  he  says. 

Ramos  also  ap¬ 
plied  such  fore¬ 
sight  back  when 
the  village  was 
under  construc¬ 
tion.  With  an  eye 
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center.  To  prevent  having  to  dig  up  the 
ring,  now  under  the  Walk  of  Champions, 
he  strategically  placed  fiber  points  of 
presence,  which  he  blended  in  with  the 
surrounding  architecture. 

Ramos  recognized  another  advantage 
of  fiber:  It  doesn’t  conduct  electricity  and 
so  is  not  susceptible  to  lightning  strikes. 
Worrying  about  the  weather  is  as  much  a 
part  of  his  job  as  managing  the  network. 
For  hurricane  protection,  Ramos  built  a 
backup  system  using  Windows  Server 
2003  shadow  copy  and  replication  tech¬ 
nology  that  stores  everything  —  from  lap¬ 
top  My  Document  folders  to  server  data 
—  on  a  1  rack-unit  high  server  with  a  ter¬ 
abyte  of  storage.  As  he  found  a  couple  of 
times  in  2004,  he  can  easily  yank  out  the 
server  and  bring  it  to  safer  ground  during 
evacuations. 

Ramos  is  applying  his  prudence  to  a 
security  project.  He’s  rolling  out  laptops 
with  fingerprint  ID  systems  for  added 
security  on  the  road  and  giving 
each  traveling  First  Tee  user  Sprint 
wireless  broadband  cards  for  In¬ 
ternet  access.  He  has  not  made 
Wi-Fi  available  at  First  Tee  head¬ 
quarters,  because  of  potential  se¬ 
curity  risks  and  interference  from 
village  shops  and  offices. 

Devoted  to  community 

Ramos  is  nothing  if  not 
dedicated.  In  addition  to 


building  up  the  computer  and  network 
infrastructure  of  the  fledgling  organiza¬ 
tion,  he  helped  build  the  multimedia 
exhibits  for  the  Hall  of  Fame  and  took 
classes  on  installing  and  maintaining  the 
IMAX  theater  there.  Such  are  the  tasks  a 
golfing  enthusiast  might  relish  —  helping 
to  preserve  and  promote  the  game  —  but 
not  Ramos.  Rather  than  golfing,  even  at 
the  nearby  TPC  Sawgrass  course  with  its 
famed  17th  green,  Ramos  would  rather 
be  serving  the  community,  he  says.  That’s 
why  you’ll  find  a  patrol  car  parked  at  his 
house,  a  vehicle  he  needs  as  deputy  sher¬ 
iff  for  St.  John’s  County  (which  includes 
St.  Augustine). “A  lot  of  people  complain 
[about  the  community],  but  do  little,” 
Ramos  says.“[Fblice  work]  is  my  service 
to  the  community’ 

Ramos,  a  fully  qualified  police  officer 
with  first-responder  training,  doesn’t  just 
play  sheriff  when  he  feels  like  it.  He  works 
75  to  100  hours  per  month,  mostly  on 
weekends  and  during  states  of  emer¬ 
gency  “We  can  burn  out  or  let  technolo¬ 
gy  drive  us  crazy  Ramos  says.  “Law  en¬ 
forcement  is  my  break.” 

It  also  gives  him  some  great  stories.  For 
instance,  he  likes  to  recount  the  time  he 
came  upon  a  rollover  accident.  The  dri¬ 
ver  was  still  strapped  in,  trying  to  restart 
the  vehicle  as  if  nothing  had  happened. 

First  Tee,  with  its  mission  of  teaching 
children  life  skills,  clearly  fits  Ramos’ 
community-service  bent.B 
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■  High  density:  Up  to  96  servers  per  rack 

•  Flexible/Open:  Integrates  with  existing  infrastructure 

•  HP  Systems  Insight  Manager™:  Web-based  networked 
management  through  a  single  console 

•  Rapid  Deployment  Pack:  For  ease  of  deployment  and 
ongoing  provisioning  and  reprovisioning 


Chaos,  now  under 
your  control. 


•  Integrated  Cisco  or  Nortel  switch  options 

Save  up  to  $450  on  select  AMD  based  Blade  Servers.1 


HP  BladeSystem  servers  offer  tools  to  help  you  keep  pace  with  fluctuating  demands. 

The  HP  ProLiant  BL35p  Blade  Server  is  designed  to  relieve  some  of  the  stress.  Its 


HP  StorageWorks  MSA1500cs 


with  StorageWorks  Essentials  Management  Software 

•  Up  to  24TB  of  capacity  (96  250GB  SATA  drives) 

•  Up  to  16TB  of  capacity  (56  300GB  SCSI  drives) 

•  Ability  to  mix  SCSI  and  Serial  ATA  enclosures  for 
greater  flexibility 

•  2GB/1GB  Fibre  connections  to  host 

Get  2TB  of  storage  free  ($2,008.80  value)-' 


AMD  Opteron™  processors  offer  dual-processor  power  with  breakthrough  efficiency. 
With  management  features  like  the  Rapid  Deployment  Pack  that  lets  you  deploy 
and  redeploy  blades  without  missing  a  beat,  and  a  single-view,  graphical  user 
interface  that  streamlines  monitoring  and  configuration,  HP  BladeSystem  servers  work 
with  you  so  you  don't  have  to  work  so  hard.  And,  bundled  with  the  StorageWorks 
MSA1500cs,  you  can  reduce  the  cost  and  complexity  of  deploying  a  storage  area 
network,  giving  you  a  better  return  on  investment. 

Save  up  to  $450  on  select  AMD  based  Blade  Servers.1 


AMD 


Opteron 


SMART  ADVICE  >  SMART  TECHNOLOGY  >  SMART  SERVICES 


Call  1-888-223-5441 
Click  hp.com/go/bladesmag49 
Visit  your  local  reseller 


1  Save  up  to  $450  on  select  AMD  based  Blade  Servers.  Offer  valid  through  7/31/06.  2.  Receive  up  to  2TB  of  storage  free  with  purchase  of  HP  StorageWorks  Modular  Smart  Array  1500cs  devices.  Offer  valid  through  7/31/06.  All  offers  available  from  HP  Direct  and  participating  resellers.  Prices  shown  are 
HP  Direct  prices,  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  tax  or  shipping  to  recipient's  destination.  Reseller  prices  may  vary.  See  Web  site  for  full  details.  For  hard  drives,  1GB  =  1  billion  bytes.  Actual  formatted  capacity  is  less.  Photography  may  not  accurately  represent  exact 
configurations  priced.  Associated  values  represent  HP  published  list  price.  AMD,  the  AMD  Arrow  Logo,  AMD  Opteron  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©2006  Hewlett-Packard  Development  Company,  L.P 
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etting  to  know  you.  Getting  to  know  all  about 
you. That  was  our  aim  in  asking  you  to  partici- 
byjuliebort  pate  in  an  informal  Web  survey  We  wanted  to 
■ap-:  know  about  your  preferred  food,  work  environ¬ 
ment,  vacation  plans,  techno  toys,  celebrities 
and  more. The  votes  are  in  from  185  readers, 
and  here’s  a  look  at ...  you. 


French  fries  (68%)  over  sushi  (32%) 

Meat  &  potatoes  (92%)  over  tofu  &  veggies  (8%) 
Ice  cream  (81%)  over  fruit  sorbet  (19%) 
Four-topping  pizza  (63%)  over  hearty  salad  (37%) 


Your  most-named  favorite  foods 
are  cheeseburgers,  chick 
en,  chocolate,  steak  and 
Thai  food.  But  favorites 
also  ranged  from  bar 
food  —  buffalo  wings  | 

—  to  white-tablecloth 
luxuries  —  foie  gras. 


*  HOIS  U81I M 


Start  work  early  (68%)  over  working  late  (32%) 

E-mail  (82%)  over  phone  (18%) 

Solving  problems  (55%)  over  initial  design  (44%) 

Problem-free  smoothness  (59  %) 
over  high-octane  excitement  (41  %) 

Top  favorites  aspects  of  work  are 
designing  new  IT  systems,  learning 
new  stuff,  working  flexible  hours,  helping  others 
and  solving  challenging  problems.  But  some 
named  figuring  out  stuff  that  nobody  else  has, 
and  that  there  is  never  a  dull  moment. 


houi  you  vacaGion 


#  How  you  play 


Museum  (72%)  over  casino  (28%) 

Sightseeing  (62%)  over  lounging  on  the  beach  (38%) 
France  (56%)  over  Peru  (44%)  ^  ; 

Hotel  (74%)  over  tent  (26%) 


Disney  World,  Hawaii,  Paris 
and  San  Francisco  bubble 
up  as  the  favorite  vacation 
spots,  but  some  of  you 
yearn  for  far-flung  destina¬ 
tions  like  Bonaire,  in  the 
Caribbean;  Bruges,  Belgium; 
and  Miconos,  Greece. 


Monopoly  (73%)  over  Battleship  (27%) 
Cinema  (57%)  over  live  performance  (43%) 
Football  (78%)  over  NASCAR  (22%) 

Alone  time  (57%)  over  socializing  (43%) 


Some  of  you  fancy  bird  watching  and  slot  car 
racing,  but  overall  favorite  pastimes  are  bicy¬ 
cling,  spending  time  with  the  family  gardening, 
golfing,  playing  a  musical  instalment,  reading, 
playing  soccer  and  video  gaming.  And  when  it 
comes  to  music,  you  like  classical  more  than 
country  western,  jazz  over  rap  and  hip-hop,  rock 
over  gospel  and  golden  oldies  over  Top  40. 


$  your  pavopioe  Geonno  Doys 

Palm  (59%)  over  BiackBerry  (41%) 

IPod  (71%)  over  Xbox  (29%) 

Hybrid  (58%)  over  Hummer  (42%) 


Your  BiackBerry  orTreo, 
PlayStation,  cell  phone  and 
GPS  devices  get  the  nod  as 
most-named  faves,  but  wire¬ 
less  BBQ  thermometers  also 
rated  a  mention. 


your  pavoride  ceienriDies  1+ uinaG  you  read 


Linus  Torvalds  (58%)  over  Vint  Cerf  (42%) 

Paula  Abdul  (58%)  over  Simon  Cowell  (42%) 

Donald  Trump  (68%)  over  Martha  Stewart  (32%) 

Jackie  Chan  (88%)  over  Jean-Claude 
Van  Damme  (12%) 


Show  biz  personalities  Sean 
Connery,  Harrison  Ford, Tom  Hanks 
and  Jay  Leno  are  your  favorites, 
but  Albert  Einstein  and  Nelson 
Mandela  also  have  your  respect. 


Newsgroups  (54%)  over  blogs  (46%) 

Online  news  aggregator  (51%)  over 
newspaper  (49%) 

Fiction  (61%)  over  nonfiction  (39%) 


The  Lord  of  the  Rings  tril¬ 
ogy,  The  Stand  and  the 
Bible  come  up  as  your 
most-read  books,  while 
The  Hitchhiker's  Guide  to 
the  Galaxy,  Slaughterhouse 
Five  and  the  Rand  McNally 
Atlas  earned  praise,  too. 


>  '0  yourself  >  WE’VE  COMPOSED  THIS  COMPOSITE  PERSONALITY  BASED  ON  OUR  2006  ALL  ABOUT  YOU  SURVEY. 

'  you  recognize  a  Network  World  reader?  Easy!  Tins  is  the  person  who  is:  ...eating  meat  and  potatoes,  french  fries,  pizza  and  chocolate  ice  cream;-playing  Monopoly,  going  to  the  i 
t  "  T.y  quietly  relaxing  alone  er  listening  to  or  playing  rock  music;  arriving  at  work  early,  talking  with  co-workers  via  e-mail  (not  the  phone!)  and  solving  problems  during  a  high-octane,  fast-moving  day;  vacationing 

ia  fracy*  museums  and  sightseeing,  staying  at  a  nice  hotel;  engaged  in  a  vigorous  newsgroup  discussion,  tuning  into  an  online  news  aggregator  or  reading  a  good  novel;  working  on  a  Palm,  listening  to  an  iPod,  driving  a 

hybrid-toi  fl&tk;  giving  Linus  Torvalds  the  thumbs-up  sign;  siding  with  Paula  Abdul’s  opinions,  admiring  Donald  Trump’s  chutzpah;  laughing  it  up  at  Jackie  Chan. 


■>  v»0  ON  AN  INFORM  Ah  WfO  CURVE*  Of  MS  READERS 
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E-MAIL  NEWSLETTER  SHOWCASE: 

Network  optimization 

Preventing 
backups  from 
ruining  app 
performance 

BY  DENISE  DUBIE 

John  Hines  last  year  noticed  a  strange  thing  about  band¬ 
width  —  the  more  he  had  the  more  his  applications  used. 

The  IT  manager  at  Crafton,Tull  &  Associates,  an  architect 
and  design  firm  with  offices  in  Alabama,  Arkansas  and 
Oklahoma,  had  worked  to  centralize  its  backup  processes 
for  the  data  center  and  remote  offices.  Yet  the  backup 
process  became  a  bandwidth  hog. 

“The  more  bandwidth  we  added,  the  more  that  backup 
software  would  use, "he  says.“The  application  had  throttling 
capabilities  too,  but  if  I  throttled  it  way  down  or  only  allot¬ 
ted  it  half  the  bandwidth,  it  didn’t  seem  to  have  any  effect.” 

Other  applications  were  suffering  when  backups  were 
running.  The  backups  were  timed  events  and  each  office 
would  duplicate  every  8  hours,  but  on  many  occasions  the 
backups  made  working  with  other  applications  difficult. 

“It  would  take  three  minutes  for  employees  to  log  into  our 
SQL-based  accounting  application  on  Fridays  and 
Mondays,  when  they  needed  to  be  doing  their  timesheets,” 

“The  more  bandwidth  we  added, 
the  more  that  backup  software 
would  use.” 

John  Hines,  IT  manager,  Crafton,  Tull  &  Associates 


he  says.  “We  killed  the  back  ups  on  Fridays  and  Mondays 
because  the  accounting  app  was  getting  stepped  on.” 

With  upset  users,  Hines  decided  about  six  months  ago  to 
investigate  acceleration  tools.  He  bought  a  Packeteer 
PacketShaper  2500  appliance.  Typically,  PacketShaper 
devices  are  deployed  at  both  ends  of  WAN  links  and  use  a 
variety  of  techniques  to  move  data  across  the  connections 
more  efficiently  to  reduce  congestion  and  improve  appli¬ 
cation  response  times.  Because  the  network  at  this  firm  is 
strictly  VPN  and  uses  a  star  topology  Hines  says,  “all  our 
remote  offices  are  only  connected  to  us  and  all  the  traffic 
goes  through  us”  so  he  was  able  to  achieve  acceleration 
and  optimization  goals  with  just  one  box. 

With  the  appliance  in  place,  Hines  gave  the  backup  soft¬ 
ware  a  low  priority  in  terms  of  bandwidth  allocation, 
defined  the  accounting  application  as  a  higher  priority 
and  managed  to  improve  performance  for  about  200  end 
users  on  the  com¬ 
pany  intranet. 

“The  accounting 
application  went  from 
response  times  of  over 
three  minutes  down  to 
less  than  20  seconds," 

Hines  says.  “And  now 
even  the  backups 
work  better- ■ 
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Vendor  Solutions  for  Your  IT  Challenges 

COMPANY:  Diskeeper  Corporation 

OVERVIEW:  Diskeepe  r  Corporation  is  best  known 
for  Diskeeper®, The  Number  One  Automatic  Defrag¬ 
menter™.  With  over  20  million  licenses  sold,  corpora¬ 
tions  worldwide  rely  on  Diskeeper  to  provide  unparal¬ 
leled  speed  and  reliability  on  their  workstations  and 
servers.  The  company  also  provides  real-time  data 
protection  and  instant  file  recovery  with  Undelete® 
and  automated  patch  and  systems  management  with 
Sitekeeper®. 

CHALLENGE:  Even  with  all  the  new  technolo¬ 
gies  in  data  storage,  the  disk  is  still  the  weakest  link 
in  a  computer.  SATA  is  improving  workstation  per¬ 
formance,  and  RAID  (typically  SCSI)  is  the  norm  on 
production  servers.  Even  storage  virtualization  in  the 
form  of  SANs  is  helping.  However,  other  than  defrag¬ 
mentation  software,  no  solution  —  hardware  or  soft- 
ware-based  —  is  able  to  solve  the  age-old  issue  of 
file  fragmentation.  While  specialized  defragmentation 
software  exists  to  solve  it,  it  must  properly  integrate 
with  business  operations  or  else  its  value  is  irrelevant. 

SOLUTION:  Large  disks,  multimedia  files,  applica¬ 
tions,  operating  systems,  system  updates,  virus  signa¬ 
tures  —  all  dramatically  increase  the  rate  of  fragmenta¬ 
tion.  If  fragmentation  is  not  addressed  daily,  system 
performance  will  suffer.  Fragmentation  increases  the 
time  to  access  files  for  all  common  system  activities 
such  as  opening  and  closing  Word  documents,  search¬ 
ing  for  e-mails,  opening  Web  pages  and  performing 
virus  scans,  and  executing  database  searches  and 
transactions. To  keep  performance  at  peak,  defrag¬ 
mentation  must  be  done  daily  on  all  systems. 

IT  Managers  use  Diskeeper's"Set  It  and  Forget  It"  opera¬ 
tion  for  automatic  network-wide  defragmentation. 
Customers  agree  Diskeeper  maintains  the  performance 
and  reliability  of  all  their  desktops  and  servers,  even 
reducing  maintenance  and  increasing  hardware  life. 

Every  system  on  your  network  needs  Diskeeper,  the 
Number  One  Automatic  Defragmenter.  Special  offer: 
Try  Diskeeper  1 0  FREE  for  45  days!  Download  at 
www.diskeeper.com/nww5  (Note:  Special  45-day 
trialware  is  only  available  at  the  above  link). 

Volume  Licensing  and  Government/Education  dis¬ 
counts  are  available  from  your  favorite  reseller  or  call 
800-829-6468  Ext.  4371. 


800-829-6468  Ext.  4371 
www.diskeeper.com/nww5 


COMPANY:  The  Siemon  Company™ 

OVERVIEW:  Established  in  1903,  Siemon™  special¬ 
izes  in  the  manufacture  and  innovation  of  high- 
performance  network  cabling  solutions.  One  of  only 
three  network  cabling  companies  with  true  global 
capabilities,  Siemon  offers  the  most  comprehensive 
suite  of  copper  and  fiber  cabling  systems  available. 
With  over  400  active  patents  specific  to  structured 
cabling,  Siemon  Labs™  invests  heavily  in  R&D  and 
industry  standards,  underlining  the  company's  long¬ 
term  commitment  to  its  customers  and  the  industry. 

CHALLENGE:  According  to  the  London  Metal 
Exchange,  the  price  of  copper  has  tripled  in  the  past 
four  years,  rising  over  59%  between  January  and  May 
of  2006  alone.  With  copper  prices  soaring  globally 
and  showing  little  signs  of  stabilizing,  network  cabling 
companies  have  been  forced  to  adjust  copper  cable 
pricing  accordingly. 

SOLUTION:  Through  the  standards-accepted  prac¬ 
tice  of  cable  sharing,  Siemon's  fully-shielded  category 
7/class  F  TERA®  cabling  system  allows  up  to  4  applica¬ 
tions  to  run  over  a  single  cable,  potentially  reducing 
the  number  of  copper  cabling  channels.  By  virtue  of 
individually  foil-wrapped  pairs  and  overall  screen, 

S/FTP  cable  allows  multiple  applications  to  run  with¬ 
out  internal  interference. 


S/FTP  cable  construction  is  further  supported  by  the 
TERA  4-quandrant  isolated  outlet  which  can  be  easily 
terminated  in  less  than  3  minutes.  Fitting  within  a 
standard  RJ  footprint,  the  combination  of  the  TERA 
outlet  and  TERA  to  RJ  patch  cords  allows  simple 
facilitation  of  cable  sharing.  As  with  traditional  cabling 
channels,  all  four  pairs  of  each  cable  are  terminated 
in  a  single  outlet.  However,  unlike  an  RJ  interface, 
the  TERA  outlet  can  support  up  to  4  one-pair  cords, 

2  two-pair  cords  or  a  combination  of  the  two,  without 
the  need  for  additional  splitters  or  adapters. 


Depending  on  the  applications,  a  singleTERA  cable  can 
replace  up  to  4  copper  channels.  With  copper  prices 
significantly  raising  the  cost  of  cable,  this  reduction  in 
total  cable  runs  can  provide  an  immediate  cost  benefit 


Siemon's  in-depth  whitepaper  detailing  the  pracrT-  or 
cable  sharing  is  available  online  at  www.5ismpn.com 

or  at  www.networkworid.com 
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■  Unmatched  access  to  Asia 
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E-MAIL  NEWSLETTER  SHOWCASE:  Security  strategies 

Tips  for  implementing 
encryption  on  stored  data 


BY  M.  E.  KABAY 

One  of  my  graduate  students  wrote  to 
me  recently  about  the  rash  of  data  losses 
on  unencrypted  laptop  computers  and 
backup  media  and  asked  how  I  would 
promulgate  policy  to  cope  with  the 
problem. 

Here’s  how  I  would  approach  the  organi¬ 
zational  behavior  change  needed  to 
ensure  that  sensitive  data  on  all  storage 
media  in  the  organization  is  protected. 

•  Establish  and  implement  a  company¬ 
wide  policy  forcing  encryption  of  all 
sensitive  folders  on  company  comput¬ 
ers,  servers  and  removable  media.  The 
policy  can  use  whole-disk  encryption 
(for  example,  Encryption  Anywhere 
Hard  Disk  from  GuardianEdge  or  PGP’s 
PGP  Whole  Disk  Encryption  products) 
or  it  can  focus  on  partition-  or  folder- 
specific  encryption. 

Regardless  of  which  technique  or  prod¬ 
uct  is  used,  the  organization  must  plan  for 
key  escrow  to  permit  data  recovery  if  an 
employee  forgets  a  key, quits  in  anger  or  is 
fired.  Appropriate  products  include  cen¬ 
tralized  key  management  and  key-recov¬ 
ery  features.  Policies  must  take  into 
account  the  likelihood  that  keys  and 
even  the  encryption  software  will  change 
over  time;  therefore,  archive  managers 
must  manage  backups  so  that  data  can 
be  recovered  and  rewritten  under  the 
new  encryption  procedures  as  they 
change. 

•  In  your  IT  or  IT-security  newsletters, 
publicize  the  news  about  the  losses  of 
control  over  unencrypted  data  on  laptop 
computers,  isolated  hard  drives  and  tapes. 
Some  employees  who  do  not  understand 
or  believe  that  encryption  is  important 
will  resist  change  and  may  even  obstruct 
progress  towards  the  new  procedures. 
Setting  the  stage  for  policy  development 
and  implementation  helps  to  smooth  the 
way  for  change. 

•  Provide  extensive  awareness,  training 
and  education  over  the  next  few  months 
for  all  staff  on  how  and  why  to  follow  the 
encryption  procedures  for  their  disks 
and  removable  media; 
be  sure  to  have  the  em¬ 
ployees  work  on  sce¬ 
narios  of  what  might 
happen  to  their  group 
if  confidential  data 
were  released  through 
loss  or  theft.  Have  the 
technical  support  staff 
test  the  product  thor¬ 
oughly  and  work  on 


Implement  a  company¬ 
wide  policy  forcing  en¬ 
cryption  of  all  sensitive 
folders  on  company 
computers,  servers 
and  removable  media. 

problems  likely  to  occur  with  the  prod¬ 
uct. You  can  save  a  lot  of  time  by  record¬ 
ing  narrated  PowerPoint  files  that  can 
help  users  with  step-by-step  illustrations 
of  what  to  do  with  the  products;  be  sure 
to  include  screen  shots.  I  often  create 
animations  using  overlays  of  screen 
shots  so  that  users  can  follow  the  opera¬ 
tions  click-by-click. 

•  Begin  a  gentle  process  of  random 
audits  with  praise  and  reward  for  those 
found  to  be  following  the  encryption 
guidelines  and  gentle  reminders  to  those 
violating  the  policy.  Praise  works  better 
than  punishment  in  modifying  behavior. 
Establish  friendly  competitions  among 
groups  to  see  which  can  be  first  to 
achieve  100%  compliance  with  the 
encryption  regime. 

•  Tighten  the  screws  gradually  by 
announcing  the  steady  increase  in 
penalties  for  violating  the  policy;  over 
the  next  months,  bring  them  to  their 
managers  for  discussions  of  the  impor¬ 
tance  of  the  policy  and  the  future  penal¬ 
ties  for  noncompliance. 

•  After  enough  time  has  passed  (say,  a 
few  months)  to  ensure  almost  complete 
compliance  with  the  policy  suspend  or 
eventually  fire  anyone  found  to  be  violat¬ 
ing  this  policy  during  random  audits  of 
laptops.  However,  you  will  have  to  be 
prepared  to  deal  with  top  executives 
who  violate  the  policy,  so  you  might 
want  to  be  careful  about  promulgating 
draconian  penalties  that  you  don’t  plan 
to  enforce  uniformly. 

Disclaimer:  I  have  no  financial  interest  in 
the  products  named;  mention  of  specific 
products  does  not 
imply  endorsement. 

Kabay  PhD.,  CISSP- 
ISSMPis  program  direc¬ 
tor  of  the  Master  of 
Science  in  Information 
Assurance  at  Norwich 
University  in  Northfield, 
Vt.  He  can  be  reached  at 
mkabay@norwich.  edu. 
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The  Power  of  Being  There ? 
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With  double  the  resources,  Avocent  and  Cyclades  management  tools  An  Avocent.  Company 

provide  the  total  solution  for  IT  infrastructure  management  -  KVM,  serial 
and  power  -  ail  over  IP,  plus  Intelligent  Platform  Management  Interface 


Avocent  Corporation  c-r  its  affiliates.  All  other 
trademarks  or  company  names  are  trademarks  or 
registered  trademarks  of  their  respective  companies. 
Copyright  €■  2006  Avocent  Corporation. 


Visit  www.avocent.com/powerx2 
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RELAX.  YOU’RE  IN  CONTROL  NOW. 


No  software  licensing  fees,  Secure  your  Data  Center, 
Manage  remote  offices  from  wherever  you  are. 

•  State  of  the  art  security 
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Dependable,  Powerful,  Secure,  Guaranteed 

24/7  Mission  Critical  Reliability 
Industry  Best  Video  Resolution 
USB,  PS/2,  Serial  Support 
Single,  Dual,  Quad  Models 
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::  Ultra  Matrix™ 

Remote 

control  up  to  1,000  computers  and 
network  devices  over  IP 
State  of  the  art  security 
High  resolution 
On-screen  menu 
USB  /  PS2 
Serial  Access 


Ultra  Matrix 


TM 


control  up  to  1,000  computers  and 
network  devices 
Security  system 
High  resolution 
On-screen  menu 
Multi-platform  /  Serial  Support 


::  CrystalView™ 

Extends  keyboard,  video,  and 
mouse  signals  up  to  33,000  feet 
Fiber  /  CATx 
DVI/ VGA 
PS2  /  USB 
High  resolutions 
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RackView™  Sun  "  RackView 


TM 
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Rack  Drawer  KVM,  1U  or  2U 
15"  17"  or  20"  VGA 
PS/2  or  USB 
Touchpad  or  Trackball 
TFT  Optional  Touchscreen 
W/  KVM  Switch 


ROSE  US 
ROSE  EUROPE 
ROSE  ASIA 
ROSE  AUSTRALIA 


281  933  7673 
+44  (0)  1264  85057 
+65  6324  2322 
+617  3388  1540 


www.rose.com 

281  933  7673  800  333  9343 

ROSE  ELECTONICS  10707  STANCLIFF  HOUSTON,  TEXAS  77099 


Panel  Mount  LCD 
15”,  17",  19",  or  20" 

VGA  /  (DVI  /  S-Video  19"  only) 
TFT  Optional  Touchscreen 
W/  Extenders 
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a  trademark  of  Server  Technology,  Inc. 


Server  Technology 

Solutions  for  the  Data  Center  Equipment  Cabinet 


The  Sentry  CDU  distributes  power  for  Blade 
servers  or  up  to  42  dual-power  1U  servers 
in  one  enclosure.  Single  or  3-phase  input 
with  110VAC,  208 VAC  or  mixed  110/208VAC 
single-phase  outlet  receptacles. 

Metered  CDU 

>  Local  input  Current  Monitoring 

Smart  CDU 

>  Local  Input  Current  Monitoring 

>  Supports  External  Temperature  and 
Humidity  Probes 

>  IP  Monitoring  of  Power  Temperatures 
and  Humidity 

Switched  CDU 

>  Local  input  current  Monitoring 

>  Supports  External  Temperature  and 
Humidity  Probes 

>  IP  Monitoring  of  Power,  Temperatures 
and  Humidity 

>  Remote  Power  Control  of  Each  Outlet 
—  On  /  Off  /  Reboot 


Server  Technology,  Inc. 
1040  Sandhill  Drive 
Reno,  NV  89521 
USA 


toll  free +1.800.835.1515 
tel  +1.775.284.2000 
fax  +1.775.284.2065 

www.servertech.com 

sales@servertech.com 


Advertisement 


Observer  delivers  WLAN  mgmt.  for  Select  Comfort 


The  Select  Comfort®  Corporation 
(NASDAQ:  SCSS),  creator  of  the 
revolutionary  Sleep  Number®  bed, 
has  over  2,500  employees,  375  retail 
outlets,  and  delivers  net  sales  of  $558 
million  annually.  For  years,  network 
administrator  Christian  Wilson 
used  Observer®  Suite  by  Network 
Instruments  to  monitor,  manage,  and 
troubleshoot  the  company's  network. 

When  Select  Comfort  implemented 
an  802.1 1  wireless  LAN,  Wilson  used 
Observer  to  deploy  access  points, 
load  balance  wireless  traffic,  find 
rogue  wireless  devices,  and 
implement  WLAN  corporate  policies. 

"At  first,  our  WLAN  was  created 
solely  to  support  the  devices  used  by 
employees  managing  inventory,"  said 
Wilson.  "Over  the  years  it  has  grown 
to  support  our  corporate  users  as 
well.  With  Observer's  many  WLAN 
features,  I  can  monitor  utilization, 
watch  for  rogue  access  points, 
run  usage  reports,  and  perform 
baselining  activities— improving  the 


performance  of  our  wireless  network." 

Select  Comfort  first  started  using 
Observer  Suite  in  2002,  when  Wilson 
was  looking  for  an  alternative  to 


Observer's  Wireless  Site  Survey 
mode  offers  scanning  of  multiple 
802.1  la/b/g  channels  displaying 
numerous  wireless  statistics,  including 


Observer  ensured  our  data  wasn’t 
susceptible  to  hackers — I  can’t  tell 
you  how  much  that  is  worth. 

Christian  Wilson,  Select  Comfort 


Network  General's  Sniffer®  analyzer. 

"I  had  used  Sniffer  for  three  years 
and  started  looking  for  a  product  that 
was  reasonably  priced  with  solid 
functionality,"  said  Wilson.  "Many 
features  you  would  pay  extra  for  witn 
Sniffer  are  included  with  Observer. 
For  example,  wireless  support 
is  included  with  Observer  whereas 
with  Sniffer  it  was  an  additional 
cost.  When  you  throw  in  the 
price  difference,  Observer  wins 
nands  down." 


frame  types,  management  frames, 
speeds,  signal  strength),  signal  quality, 
and  channels  in  use.  A  convenient 
channel  map  provides  a  quick  view 
of  current  network  status.  As  Select 
Comfort's  WLAN  expanded,  security 
became  a  concern.  Fortunately, 
Observer  offered  Wilson  a  way  to 
safeguard  the  network. 

"With  Observer,  it's  easy  to  find 
rogue  access  points,"  said  Wilson. 
"I  simply  load  Observer  onto  my 
laptop  and  walk  around  the  building 


to  find  which  access  points  are 
transmitting.  I  only  had  six  access 
points  deployed,  but  Observer  saw  a 
lot  more.  Employees  were  purchasing 
units  on  their  own  and  installing 
them  below  their  desks.  This  was 
incredibly  dangerous  from  a  security 
point  of  view.  Thanks  to  Observer, 
I  created  a  new  corporate  security 
policy  to  help  protect  our  network 
that  I  could  easily  enforce." 

Observer's  ability  to  secure  Select 
Comfort's  network  traffic  is  the  single 
most  important  benefit  to  Wilson. 

"The  knowledge  and  insight 
provided  by  Observer  is  priceless," 
said  Wilson.  "How  can  I  quantify 
how  much  money  and  time  we've 
potentially  saved  by  locating  rogue 
access  points?  Observer  ensured 
our  data  wasn't  susceptible  to 
hackers— I  can't  tell  you  how  much 
that  is  worth." 


Observer  is  the  only  fully  distributed  network  analyzer  built  to  monitor  the  entire  network  (LAN,  802.1 1  a/b/g,  Gigabit,  WAN). 
Download  a  free  Observer  demonstration  today.  Visit  www.networkinstruments.com/analyze  to  learn  more. 

US  &  Canada  toll  free  800-526-5958  fax  952-358-3801  UK  &  Europe  +44(0)1959  569880 
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Production  Tracking  Over  Ethernet 
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Eliminate  your  shop-floor 
PCs  with ... 

Ethernet  Terminals  from 
ComputerWise  connected  to 
your  in-house  LAN. 

Capture  production  data 

*  ■ :  ’  Eif. 

directly  into  files  on  your 
server. 


Features  £  Benefits 

•  Interactive  Telnet  Client 

•  TCP/IP  over  10/IOOBaseT  Ethernet 

•  Built-in  Barcode  Badge  Reader 

•  Optional  Mag-Stripe  &  RFID  Badge  Reader 

•  Auxiliary  RS-232  Serial  port 

•  Customizable  Data  Collection 
Program  Included 

•  Larger  keyboard  and 
display  sizes  available 


(oMirniiwisE. 

Cali  1-800-2S5-373S  or  visit  www.Gomputerwise.com 


ABSOLUTELY 

W*  DOWNTIME-FREE. 

hKhr  WORRY-FREE.  KG  • 
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If  the  thought  of  finding  a  co'oling  solution  is  | 
making  you  break  out  in  a  cofd  sweat,  get  a  . 
MovinCool  and  relax.  As  the  industry  leMerM 
since  1982,  MovinCool  offers  mire  solutiS^^d 
for  your  cooling  needs,  along  wreh  unrivaietf§^, 


for  your  cooling  needs,  along  with  unrivalea§^^ 
capacity  and  non-stop  reliability,  if  floor  space 
in  your  server  room  is  an  issue,  our 
ceiling-mount  CM  1 2  provides  optimum 
cooling  power  while  taking  up  no  floor  space.  :  ^ 
With  all  this  selection,  is  there  a  MovinCool 
that’s  right  for  you?  Absolutely! 


The  Office  Pro  series 
provides  maximum 
coolnig  for 
heat-sensitive 
equipment 


Visit  movincool.com  or  call  800-264 


THE  #1  INNOVATIVE  SPOT  COOLING'sQLOT'ON’  ' 

■  +.vr  ’  ■  ;.,4 

-9573  for  more  information  or  to  find  a  dealer  near  you 
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networkTAPs 


TAP  Into  Your  Network 


Only  a  TAP  can  provide  a  complete  copy  of  data  from  full-duplex  links  at  line  rate  for 
monitoring  devices.  Without  a  TAP,  a  monitoring  device  may  be  fed  incomplete  and 
misleading  information-creating  false  positives  and  overlooking  network  problems 
that  actually  do  exist.  Visit  www.networkTAPs.com/visibility  today. 


Copper  nTAPs 


10/100 . $395 

10/100/1000 . $795 


Copper  to  Optical 
Conversion  nTAPs 

SX  or  LX . $1,495 


Optical  nTAPs 


One-Channel . $295 

Two-Channel . $575 

Three-Channel . $845 


To  learn  more  about  how  nTAPs  can  boost  your  network  visibility,  which  configuration  option 
is  best  for  you,  and  to  check  out  new  pricing  go  to  www.networkTAPs.com/visibility 
or  call  866-GET-nTAP  today.  Free  overnight  delivery* 
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“Free  overnight  delivery  on  all  U.S.  orders  over  $295  confirmed  before  12  p.m.  Central  Time. 
/jTAP  and  all  associated  logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC. 
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Server  room 
climate  worries? 


Server  Room 
Climate  &  Power 
Monitoring 


Howto 
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Get  our 

free 

book. 
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E-mail  FreeBook@ITWatchDogs.com  with  your 
mailing  address  or  call  us  at  512-257-1462 


Yellowjacket* 
Hive  screen 


yeuowMCKer 

802.1  Ibg  W-LAN  ANALYZER 

>  2.4  GHz  (802.11b  &  g)  SPECTRUM  ANALYSIS 

^  Locate  hackers  and  rogue  AP’s 
>•  Pinpoint  specific  interference  sources 

►  Install  &  secure  Wi-FI  networks 


Yellowjocket®  Hive 
Software 

Site  Initiator/Supervisor/ 
Investigator  indoor/outdoor 
mapping  W-LAN  coverage 
solution 


Berkeley  Varitronics  Systems  m™,njo884o 

(732)  548-3737  www.bvsystems.com 


Shown  with 
optional 
Direction 
Finder 


•  Tl/El  &  T3/E3  Modems 

•  RS-232/422/485  Modems  and 
Multiplexers 

•  IBM  3270  Coax,  AS400  Twinax,  and 
RS6000  Modems  and  Multiplexers 

•  LAN  -  Arcnet/Ethernet/Token  Ring 

•  Video/Audio/Hubs/Repealers 

•  ISO-9001 

•  USB  Modem  and  Hub 


Toll  Free  866-SITech-l 
630-761-3640,  Fax  630-761-3644 
www.sitech-bitdriver.com  or  www.sitechfiber.com 


ONE  PHONE  SYSTEM 

for  many  branch  offices 

<mck  communications 

A  Citel  Company 

MCK  EXTenders 

New,  Refurb, 
Installation,  Support 
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IT  Environment  Monitoring 

•  Digital  Temperature 

•  Digital  Humidity 

•  Main  /  UPS  Power 

•  Flood  /  Water 
e  Smoke /Fire 


Solutions 
Start  At  $295 


Cameras,  Sound,  Light,  Air  Flow, 
Room  Entry,  Dry  Contacts  &  More 


Easy  Online  Ordering  At 

EnvironmentMonitor.com 


AVTECtf 
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888.220.6700 

401.847.6700 


AVTECH.com 

EnvironmentMonitor.com 
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tACKSPIN 


Mark  Gibbs 


I  ere’s  a  technology 
that  sounds  like  a 
I  good  idea:  an  RFID- 
enabled  tilt  sensor  that 
attaches  to  a  bottle  and 

tracks  the  time,  angle  and  duration  of  tilt.  From  that  data 
the  bartender’s  pouring  style  and  the  volume  of  each 
drink  poured  can  be  estimated. 

The  company  selling  this  system  is  Beverage  Metrics 
and,  according  to  its  Web  site, “Each  pour  is  automatically 
reconciled  with  its  ring-up,  and  an  unaccounted  pour  is 
clearly  marked  until  it  is  duly  entered.  Pour  volume,  brand 
and  payment  information  is  detailed  in  the  daily  reports. 
This  reconciliation  makes  it  possible  to  balance  the  rev¬ 
enue  ledger  at  the  end  of  the  day  provides  the  informa¬ 
tion  to  assure  recipe  accuracy  and,  therefore,  consistency 
of  pouring  margins.” 

Beverage  Metrics  can  supply  an  optional  video  system 
that  provides  real-time  streaming  video  so  that  “any  event, 
whether  it  is  the  removal  of  a  bottle  of  wine  from  the  rack, 
the  pouring  of  a  drink,  opening  of  a  beer  bottle,  pulling  of 
a  tap  handle  or  the  opening  of  a  door,  is  captured  for  a  few 
seconds, stored  and  linked  to  the  events  transaction  log.” 

In  other  words  every  drink  is  tracked  in  excruciating 
detail  at  a  price  of  around  $5  per  bottle  (this  is  expected 
to  fall  to  around  $2  per  bottle).  Among  the  businesses  test¬ 


Collecting  data  for  the  wrong  reasons 

H 


ing  this  system  are  Hilton,  Hyatt,  Outback  Steakhouse  and 
TGI  Friday’s. 

1  asked  my  brother-in-law, The  Mighty  B,who  has  been  a 
bartender,  what  he  thought  of  this  system:“I  was  chased  by 
this  sort  of  thing  for  years.  Someone  is  always  trying  to 
make  this  kind  of  penny-pinching  system  work.” 

TMB  continued:“The  premise  is  faulty  It  would  be  hard 
for  me  to  reduce  the  owner’s  profit  significantly  by  giving 
a  few  drinks  away  because  of  our  300%  to  1,200%  markup 
on  drinks.  The  sales  pitch  seems  to  be, ‘we’ll  show  you 
who  to  go  afterJ  But  the  problem  is  the  thinking  that  goes 
behind  it:  It’s  greedy  and  antagonistic.  What  do  I  get  out  of 
giving  away  a  $5  drink?  An  extra  buck  or  two?  No,  I  get  a 
friend  who  represents  the  sort  of  customer  we  want,  likes 
his  bartender,  and  is  coming  back  tomorrow  and  the  next 
day  month  and  year.  And  that  is  why  you  hire  good  bar- 
tenders.You  trust  them  to  give  a  little.To  run  your  bar  and 
make  it  go.  Bartenders  are  your  liquor  control  system.  It  is 
in  the  mutual  interest  of  me  and  the  owner  that  we  attract 
and  maintain  our  clientele.” 

TMB  had  lots  more  to  say  but  the  bottom  line  is  that 
these  solutions  substitute  data  management  for  business 
management. 

There’s  a  lesson  here:  In  any  business  where  you  use 
technology  to  monitor  staff  behavior,  you  better  have  a 
real,  undeniable,  unavoidable  reason  to  do  so. 


Consider  monitoring  staff  communications:  If  you  need 
to  monitor  e-mail,  instant  messaging  and  telephone  calls 
for  regulatory  compliance, you  have  no  choice  —  you’ve 
got  to  do  it  and  your  staff  should  understand. 

But  if  you  don’t  have  to  monitor  and  you  do  it  anyway 
why  are  you  doing  it?  Just  because  it  could  help  you  con¬ 
trol  costs  and  is  easy  to  do  isn’t  a  reason. 

Is  it  because  you  don’t  trust  your  staff?  If  so,  you  have  a 
huge  problem  and  monitoring  —  which  will  be  known  by 
everyone  no  matter  how  much  you  try  to  keep  it  secret  — 
will  just  give  your  staff  even  more  reason  not  to  be  loyal. 

There  are  many  other  business  processes  and  proce¬ 
dures  through  which  it  is  becoming  progressively  easier  to 
collect  incredibly  detailed  data  in  near  or  real  time,  and 
IT  is  the  only  group  that  has  the  big  picture. 

Any  time  another  business  unit  wants  to  collect  detailed 
operational  data,  we  need  to  ask  why  the  data  is  being 
collected,  what  its  value  is,  whether  and  how  it  will  be 
acted  on  and  how,  and  what  the  consequences  will  be. 

If  we  let  every  manager  who  can’t  actually  manage  try 
to  use  IT  to  do  his  job  for  him,  we’ll  be  aiding  and  abet¬ 
ting  the  creation  of  the  kind  of  organization  we  probably 
don’t  want  to  work  for. 

Tell  backspin@gibbs.com  or  Gibbsblog  what  you’re  moni¬ 
toring.  Thanks  to  The  Mighty  B. 


ETBUZZ 


News,  insights  and  oddities 


Could  that  be  the  wireless  police  knocking? 


So  you’re  among  the  lucky  owners  who  just  paid 
Paul  McNamara  $300,000  or  more  for  a  fully  furnished,  two-bedroom, 

two-bath  unit  in  a  soon-to-open  condominium/hotel  on  a 

golf  course  nearTuscon,  Ariz. 

Life  doesn't  get  much  sweeter  —  at  least,  as  long  as  you  remember  to  secure  your 
personal  wireless  access  point  properly,  because  failure  to  perform  that  little  chore 
will  get  you  in  hot  water  with  property  management. 

Yes,  we’re  entering  the  world  of  mandatory  wireless  encryption  for  private-property 
owners,  at  least  if  the  intentions  of  the  developers  of  Canoa  Ranch  Resort  are  any  indi¬ 
cation  of  things  to  come.  We  previously  crossed  the  threshold  on  states  prosecuting 
war  drivers  (Florida,  for  example)  and  governments  requiring  safe  wireless  practices  of 
business  owners  (witness  Westchester  County,  N.Y.,  earlier  this  year). 

But  private- property  owners?  Are  the  wireless  police  about  to  come  a-knockin’  on 
the  front  door  of  your  castle? 

That's  hard  for  me  to  imagine  —  or  justify  —  but  then  again,  I’m  not  developing  or 
buying  into  Canoa  Ranch.  However,  I  certainly  can  imagine  the  idea  popping  into  the 
heads  of  local,  state  or  federal  lawmakers  —  we're  just  that  kind  of  society. 

We’re  going  to  get  a  jump  on  the  debate  right  here  because  15  regular  readers  of  my 
blog  —  members  of  the  BuzzBIog  Brigade  —  were  given  an  opportunity  to  weigh  in 
before  this  column’s  publication.  We’ll  get  to  a  sampling  of  what  they  had  to  say,  and 
you  can  read  all  their  opinions  under  the  blog  version  of  this  column  at 
www.nwdocfinder.com/1032 _ But  first,  back  toTuscon. 

Bryan  Welch  is  sales  manager  for  Canoa  Ranch,  and  he  takes  credit  for  broaching  the 
.  ire less  security  mandate  with  the  developers  of  the  project,  which  will  provide  each 
c  ido  unit/hotel  room  with  wired  broadband,  telephony  and  cableTV  service.  Owners 
•‘■v  on  their  own  for  wireless.  "We  just  kind  of  kicked  it  around  the  table  and  everybody 
said  that’s  a  helluva  good  idea,  [mandatory  encryption]  ought  to  go  in  the  declarations,” 
Welch  says.  A  lawyer  warned,  however,  that  wireless  technology  could  quickly  overrun 


any  covenants  they  put  to  paper,  "so  we  decided  that  instead  of  recording  [declara¬ 
tions]  at  the  county  that  we  would  leave  it  up  to  the  hotel  manager  to  put  it  in  their 
rules  and  regulations,”  which  are  more  easily  amended. 

"We  just  don’t  want  to  see  anybody  hurt  with  their  wireless  system,”  Welch  says.  "If 
someone  [unauthorized]  were  accessing  it  and  an  owner's  information,  there  could  be 
damage  and  a  potential  lawsuit.” 

We'll  leave  that  one  for  the  lawyers,  but  I  put  the  bigger  question  to  my  blog  readers: 
Should  safe  wireless  be  mandatory?  Oh  boy,  did  I  get  a  wide  range  of  replies. 

"I  am  generally  opposed  to  government  infringing  on  individual  rights,”  offers 
Jim  Albright.  "I  think  Benjamin  Franklin  put  it  best  when  he  said  those  who  are 
willing  to  sacrifice  essential  liberties  for  temporary  security  deserve  neither  lib¬ 
erty  nor  security.That  being  said,  I  am  absolutely  in  favor  of  regulation  requiring 
not  just  business-installed  but  all  wireless  networks  to  be  secure.  It  is  a  long¬ 
standing  premise  that  the  rights  of  an  individual  end  where  they  begin  to  infringe 
on  the  rights  of  others." 

Albright  ticks  off  three  pretty  good  examples  of  such  infringement,  too,  although  I’m 
not  quite  ready  to  abandon  ol’  Ben  on  this  one.  Neither  are  these  fellows: 

“I  can't  think  of  a  single  compelling  reason  why  an  ownership  association  should 
require  safe  wireless,"  offers  Mariano  Reyes.  “What  is  their  vested  interest?” 

Or  the  government's? 

“What  business  is  it  of  government  if  I  don’t  want  to  use  security?"  asks  JoelTrammell. 
“It  is  no  different  than  passing  a  law  that  requires  me  to  lock  the  door  on  my  house.” 

Personally,  I  might  be  able  to  get  past  the  paternalism,  but  then  there's  the  little  mat¬ 
ter  of  enforcement. That's  simply  not  going  to  happen  in  an  effective  or  even-handed 
manner,  so  why  go  through  the  charade? 

Now  if  we  want  to  talk  about  putting  the  onus  on  wireless  equipment  makers _ 

If  you’d  like  to  join  the  BuzzBIog  Brigade,  drop  me  a  line  at  buzz@nww.com. 
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